CVE-2015-6277
First published: Wed Sep 02 2015(Updated: )
The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and MDS 9000 devices 7.0(0)HSK(0.353) and SAN-OS NX-OS on MDS 9000 devices 7.0(0)HSK(0.353) allows remote attackers to cause a denial of service (ARP process restart) via crafted packet-header fields, aka Bug ID CSCut25292.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco NX-OS | =7.3\(0\)zd\(0.47\) | |
| Cisco Nexus 3000 In Standalone Nx-os Mode | ||
| Cisco NX-OS | =4.1\(2\)e1 | |
| Cisco Nexus 4000 | ||
| Cisco NX-OS | =7.0\(0\)hsk\(0.353\) | |
| Cisco SAN-OS | =7.0\(0\)hsk\(0.353\) | |
| Cisco MDS 9000 Series Multilayer Switches | ||
| Cisco NX-OS | =7.3\(0\)zd\(0.61\) | |
| Cisco Nexus 9000 Series | ||
| Cisco Nexus 1000V for VMware vSphere | =5.2\(1\)sv3\(1.4\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-6277?
CVE-2015-6277 has a CVSS score of 7.8, indicating high severity.
Which devices are affected by CVE-2015-6277?
CVE-2015-6277 affects Cisco NX-OS on Nexus 1000V, Nexus 3000, Nexus 4000, Nexus 9000, and MDS 9000 devices.
How do I fix CVE-2015-6277?
To fix CVE-2015-6277, upgrade the affected Cisco NX-OS devices to a version that is not vulnerable as recommended by Cisco advisories.
Can CVE-2015-6277 be exploited remotely?
Yes, CVE-2015-6277 allows for remote code execution under specific conditions.
What impact does CVE-2015-6277 have on system security?
CVE-2015-6277 can potentially allow an attacker to manipulate ARP traffic, leading to unauthorized access or disruption of network services.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco nx-os
- version/cisco nx-os/7.3\(0\)zd\(0.47\)
- canonical/cisco nexus 3000 in standalone nx-os mode
- version/cisco nx-os/4.1\(2\)e1
- canonical/cisco nexus 4000
- version/cisco nx-os/7.0\(0\)hsk\(0.353\)
- canonical/cisco san-os
- version/cisco san-os/7.0\(0\)hsk\(0.353\)
- canonical/cisco mds 9000 series multilayer switches
- version/cisco nx-os/7.3\(0\)zd\(0.61\)
- canonical/cisco nexus 9000 series
- canonical/cisco nexus 1000v for vmware vsphere
- version/cisco nexus 1000v for vmware vsphere/5.2\(1\)sv3\(1.4\)