CVEvulnerability

CVE-2016-1454

6.5 MEDIUM Published 2016-10-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-10-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417.

Affected configurations

• cisco nx-os (< 6.0\(2\)u6\(7\)) • cisco nx-os (>= 6.1 < 7.0\(3\)i4\(1\)) • cisco nx-os (< 7.1\(4\)n1\(1\)) • cisco nx-os (>= 7.2 < 7.2\(2\)n1\(1\)) • cisco nx-os (>= 7.3 < 7.3\(0\)n1\(1\)) • cisco nx-os (< 5.2) • cisco nx-os (< 7.2\(2\)d1\(1\)) • cisco nx-os (>= 7.3 < 7.3\(1\)d1\(1\)) • cisco nx-os (< 5.2\(1\)sv3\(1.15\)) • cisco nx-os (>= 11.0 < 11.1\(1j\)) • cisco nx-os (< 6.0\(2\)a8\(1\))

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References