According to its self-reported version, the Cisco IOS software running on the remote device is affected by multiple denial of service vulnerabilities in the DHCP client implementation when parsing DHCP packets. An unauthenticated, remote attacker can exploit these issues, via specially crafted DHCP packets, to cause the device to reload.

自己報告のバージョンによると、リモートのデバイスで実行している Cisco IOS ソフトウェアは、DHCP パケットの解析時の DHCP クライアント実装で複数のサービス拒否の脆弱性の影響を受けます。認証されていないリモートの攻撃者がこれらの問題を悪用して、特別に細工されたDHCPパケットを通じて、デバイスのリロードを引き起こす可能性があります。

根据其自我报告的版本，在解析 DHCP 数据包时，远程设备上运行的 Cisco IOS 软件受到 DHCP 客户端执行中多个拒绝服务漏洞的影响。未经身份验证的远程攻击者可利用这些问题，通过特制的 DHCP 数据包造成设备重新加载。

根據其自我報告的版本，遠端裝置上執行的 Cisco IOS 軟體在剖析 DHCP 封包時，受到 DHCP 用戶端實作中的多個拒絕服務弱點影響。未經驗證的遠端攻擊者可惡意利用這些問題，透過特製的 DHCP 封包，造成裝置重新載入。

Rockwell Automation Stratix Ethernet Switches versions prior to 15.3 use a vulnerable version of Cisco IOS or IOS XE. A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a Relay Reply denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device, which the device would then forward to a DHCPv4 server. When the affected software processes the option 82 information that is encapsulated in the response from the server, an error could occur.

A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device, which the device would then forward to a DHCPv4 server. When the affected software processes the option 82 information that is encapsulated in the response from the server, an error could occur. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
109088	Cisco IOS DHCP Multiple Vulnerabilities	Nessus	CISCO	2018/4/17	2024/5/3	high
109087	Cisco IOS DHCP Multiple Vulnerabilities	Nessus	CISCO	2018/4/17	2023/4/25	high
109087	Cisco IOS DHCP の複数の脆弱性	Nessus	CISCO	2018/4/17	2023/4/25	high
109088	Cisco IOS DHCP 多个漏洞	Nessus	CISCO	2018/4/17	2024/5/3	high
109088	Cisco IOS DHCP 多個弱點	Nessus	CISCO	2018/4/17	2024/5/3	high
109088	Cisco IOS DHCP の複数の脆弱性	Nessus	CISCO	2018/4/17	2024/5/3	high
109087	Cisco IOS DHCP 多個弱點	Nessus	CISCO	2018/4/17	2023/4/25	high
109087	Cisco IOS DHCP 多个漏洞	Nessus	CISCO	2018/4/17	2023/4/25	high
720229	Rockwell Automation Stratix Ethernet Switches < 15.3 IOS DHCPOFFER Relay Reply DOS	Nessus Network Monitor	SCADA	2019/5/8	2019/9/30	high
501768	Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0173)	Tenable OT Security	Tenable.ot	2023/11/15	2024/3/4	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high