According to its self-reported version, a distributed denial of service (DDoS) vulnerability exists in the 802.1X implementation for Cisco NX-OS Software due to incomplete input validation of EAPOL frames. An unauthenticated, remote attacker can exploit this by sending a crafted EAPOL frame to an interface on the targeted device to cause system-level restart of the device and denial of service condition.

根据其自我报告的版本，Cisco NX-OS 软件 802.1X 实现中存在分布式拒绝服务 (DDoS) 漏洞，这是因为未对 EAPOL 框架进行完整的输入验证所致。未经身份验证的远程攻击者可将特制的 EAPOL 框架发送到目标设备上的界面，以造成设备系统层级重新启动及拒绝服务，进而恶意利用此漏洞。

自己報告されたバージョンによると、Cisco NX-OSソフトウェア802.1Xの実装に、EAPOLフレームの入力検証が不完全なことによる分散型サービス拒否（DDoS）の脆弱性があります。認証されたリモートの攻撃者がこれを悪用し、細工されたEAPOLフレームを標的デバイスのインターフェイスに送信することによりシステムレベルでデバイスを再起動させ、サービス拒否状態を引き起こす可能性があります。

根據其自我報告的版本，Cisco NX-OS 軟體 802.1X 實作中有一個分散式拒絕服務 (DDoS) 弱點，這是因為未對 EAPOL 框架進行完整的輸入驗證所致。未經驗證的遠端攻擊者可將特製的 EAPOL 框架傳送到目標裝置上的介面，來造成裝置系統層級重新啟動及拒絕服務，進而惡意利用此弱點。

A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete input validation of Extensible Authentication Protocol over LAN (EAPOL) frames. An attacker could exploit this vulnerability by sending a crafted EAPOL frame to an interface on the targeted device. A successful exploit could allow the attacker to cause the Layer 2 (L2) forwarding process to restart multiple times, leading to a system-level restart of the device and a DoS condition.
Note: This vulnerability affects only NX-OS devices configured with 802.1X functionality. Cisco Nexus 1000V Switch for VMware vSphere devices are affected in versions prior to 5.2(1)SV3(1.4b). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4).
Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(5)N1(1) and 7.1(5)N1(1b). Nexus 7000 and 7700 Series Switches are affected in versions prior to 8.2(3). Nexus 9000 Series Fabric Switches in ACI Mode are affected in versions prior to 13.2(1l). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
126599	Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability	Nessus	CISCO	2019/7/10	2024/5/10	high
126599	Cisco NX-OS 软件 802.1X LAN 可扩展的验证协议拒绝服务漏洞	Nessus	CISCO	2019/7/10	2024/5/10	high
126599	Cisco NX-OSソフトウェア802.1XのLAN上での拡張認証プロトコルにおけるサービス拒否の脆弱性	Nessus	CISCO	2019/7/10	2024/5/10	high
126599	Cisco NX-OS 軟體 802.1X LAN 可延伸的驗證通訊協定拒絕服務弱點	Nessus	CISCO	2019/7/10	2024/5/10	high
501239	Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service (CVE-2019-1594)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	high

偵測

搜尋 Plugin

high

high

high

high

high