Cisco NX-OS Software NX-API Denial of Service Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the Cisco NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default.

N/A

输入验证不恰当

Cisco NX-OS Software 输入验证错误漏洞

Cisco NX-OS Software是美国思科（Cisco）公司的一套交换机使用的数据中心级操作系统软件。 Cisco MDS 9000 Series Multilayer Switches中的NX-OS Software Release 8.4(1)之前版本和Nexus 7000 Series Switches中的的NX-OS Software Release 8.2(5)之前版本的NX-AP功能存在输入验证错误漏洞，该漏洞源于程序没有正确验证HTTP请求的报头（发送到NX-AP功能）。攻击者可通过

N/A

N/A