CVE-2015-4296: Medium severity cisco nx-os vulnerability

Published Aug 19, 2015

Updated

Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial of service (Java process restart) via crafted connections to the Java application, aka Bug ID CSCut87006.

Affected Software

11 affected components

Cisco NX-OS=6.0\(2\)a6\(1\)

Cisco Nexus 3016

Cisco Nexus 3048

Cisco Nexus 3064

Cisco Nexus 31128pq

Cisco Nexus 3132q

Cisco Nexus 3164q

Cisco Nexus 3172

Cisco Nexus 3232c

Cisco Nexus 3524

Cisco Nexus 3548

Event History

Aug 19, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4296?

CVE-2015-4296 has been assigned a moderate severity level due to its ability to cause a denial of service.

How do I fix CVE-2015-4296?

To remediate CVE-2015-4296, upgrade the Cisco Nexus 3000 devices to a patched version of the NX-OS software.

Which devices are affected by CVE-2015-4296?

CVE-2015-4296 affects Cisco Nexus 3000 devices running NX-OS version 6.0(2)A6(1).

What type of vulnerability is CVE-2015-4296?

CVE-2015-4296 is a denial of service vulnerability that can restart the Java process on affected devices.

Are all Cisco Nexus 3000 devices affected by CVE-2015-4296?

No, not all Cisco Nexus 3000 devices are vulnerable; only those running the specific software version 6.0(2)A6(1) are affected.