Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device after forming an adjacency. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device and have formed an adjacency.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Vulnerability Type
空指针解引用
Vulnerability Title
Cisco IOS 和 IOS XE Software 安全漏洞
Vulnerability Description
Cisco IOS和Cisco IOS XE Software都是美国思科（Cisco）公司的产品。Cisco IOS是一套为其网络设备开发的操作系统。Cisco IOS XE Software是一个操作系统。用于企业有线和无线访问，汇聚，核心和WAN的单一操作系统，Cisco IOS XE降低了业务和网络的复杂性。 Cisco IOS 和 IOS XE Software 存在安全漏洞，该漏洞源于中间系统到中间系统 (IS-IS) 协议中的漏洞可能允许未经身份验证的相邻攻击者在受影响的设备上造成拒绝服务
CVSS Information
N/A
Vulnerability Type
N/A