Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the software processes specific SNMP object identifiers. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: To exploit this vulnerability by using SNMPv2c or earlier, the attacker must know the SNMP read-only community string for an affected system. To exploit this vulnerability by using SNMPv3, the attacker must know the user credentials for the affected system.

N/A

对可索引资源的访问不恰当(越界错误)

Cisco IOS和IOS XE 代码问题漏洞

Cisco IOS和IOS XE都是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco Catalyst 4500 Series中的IOS Software和IOS XE Software的Simple Network Management Protocol (SNMP)子系统存在代码问题漏洞，该漏洞源于在处理特定的SNMP对象标识符时程序没有充分验证输入。攻击者可通过将特制的SNMP数据包发送到受影响的设备利用该漏洞重新加载受影响的设备，进而导致拒绝服务。

N/A

N/A