CVE-2021-34767 PoC — 多款 Cisco 产品代码问题漏洞

Source

https://github.com/lukejenkins/CVE-2021-34767

Associated Vulnerability

Title:多款 Cisco 产品代码问题漏洞 (CVE-2021-34767)
Description:Cisco IOS是一套为其网络设备开发的操作系统。IOS XE是一套为其网络设备开发的操作系统。SD-WAN Software是其中的一套软件定义的WAN软件。Wire是一款聊天软件。该软件支持 Web、WindowsiOS、Android、OS X 平台，有群组功能，可以语音通话，发送照片以及其独创性的打招呼方式 PING。 Cisco Catalyst 9000是一个交换机。多款 Cisco 产品存在代码问题漏洞，该漏洞源于产品中的Wireless Controller的ipv6流量处理逻辑存在漏

Description

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

Readme

# CVE-2021-34767
## Description

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a denial of service (DoS) condition for that VLAN. The vulnerability is due to a logic error when processing specific link-local IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that would flow inbound through the wired interface of an affected device. A successful exploit could allow the attacker to cause traffic drops in the affected VLAN, thus triggering the DoS condition.

## CVSS Score
7.4

## Reference
https://nvd.nist.gov/vuln/detail/CVE-2021-34767
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-ipv6-dos-NMYeCnZv
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvw18506

## Notes
Published by Cisco, they were great to work with and in fixing the issue. 

I'm listed as the source.

File Snapshot


 [4.0K]  /data/pocs/b9b1ce2bfcb799cd78a2499c9705b4f54428dbac
├── [1.0K]  LICENSE
└── [1.1K]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!