Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco IOS XR Software IPv6 Flood Denial of Service Vulnerability
Vulnerability Description
A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause an IPv6 flood on the management interface network of an affected device. The vulnerability exists because the software incorrectly forwards IPv6 packets that have an IPv6 node-local multicast group address destination and are received on the management interfaces. An attacker could exploit this vulnerability by connecting to the same network as the management interfaces and injecting IPv6 packets that have an IPv6 node-local multicast group address destination. A successful exploit could allow the attacker to cause an IPv6 flood on the corresponding network. Depending on the number of Cisco IOS XR Software nodes on that network segment, exploitation could cause excessive network traffic, resulting in network degradation or a denial of service (DoS) condition.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Vulnerability Type
对预期协议的遵守不足
Vulnerability Title
Cisco IOS XR 安全漏洞
Vulnerability Description
Cisco IOS XR是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS XR 中IPv6协议处理存在安全漏洞，该漏洞源于软件错误地转发了具有管理接口上的IPv6节点本地多播组地址目标的IPv6数据包。攻击者可以通过与管理接口连接到同一网络并注入具有IPv6节点本地多播组地址目标的IPv6数据包来利用此漏洞。成功的利用可能使攻击者在相应的网络上引起IPv6泛洪。利用取决于该网段上的Cisco IOS XR软件节点的数量，利用可能会导致过多的网络流量，从而导致网络性能下降或
CVSS Information
N/A
Vulnerability Type
N/A