Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability
Vulnerability Description
A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly handle an error condition within a specific crafted packet sequence. An attacker could exploit this vulnerability by sending a sequence of specific PPPoE packets from controlled customer premises equipment (CPE). A successful exploit could allow the attacker to cause the PPPoE process to continually restart, resulting in a denial of service condition (DoS).Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is part of the September 2022 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see .
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Vulnerability Type
未经检查的错误条件
Vulnerability Title
Cisco IOS XR 安全漏洞
Vulnerability Description
Cisco IOS XR是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS XR Software Broadband Network Gateway PPP over Ethernet (PPPoE)存在安全漏洞，该漏洞源于没有正确处理特定制作的数据包序列中的错误条件，可能允许未经身份验证的相邻攻击者导致进程不断崩溃，攻击者可以通过从受控客户端设备发送一系列特定数据包来利用此漏洞，成功的利用可能允许攻击者导致进程不断重启，从而导致拒绝服务条件(DoS)。
CVSS Information
N/A
Vulnerability Type
N/A