CVE-2015-6392: High severity cisco nx-os vulnerability

Published Oct 6, 2016

Updated

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via crafted IPv4 DHCP packets to the (1) DHCPv4 relay agent or (2) smart relay agent, aka Bug IDs CSCuq24603, CSCur93159, CSCus21693, and CSCut76171.

Affected Software

144 affected components

Cisco NX-OS=4.1.\(2\)

Cisco NX-OS=4.1.\(3\)

Cisco NX-OS=4.1.\(4\)

Cisco NX-OS=4.1.\(5\)

Cisco NX-OS=4.2\(3\)

Cisco NX-OS=4.2\(4\)

Cisco NX-OS=4.2\(6\)

Cisco NX-OS=4.2\(8\)

Cisco NX-OS=4.2.\(2a\)

Cisco NX-OS=5.0\(2a\)

Cisco NX-OS=5.0\(3\)

Cisco NX-OS=5.0\(5\)

Cisco NX-OS=5.1\(1\)

Cisco NX-OS=5.1\(1a\)

Cisco NX-OS=5.1\(3\)

Cisco NX-OS=5.1\(4\)

Cisco NX-OS=5.1\(5\)

Cisco NX-OS=5.1\(6\)

Cisco NX-OS=5.2\(1\)

Cisco NX-OS=5.2\(3a\)

Cisco NX-OS=5.2\(4\)

Cisco NX-OS=5.2\(5\)

Cisco NX-OS=5.2\(7\)

Cisco NX-OS=5.2\(9\)

Cisco NX-OS=6.0\(1\)

Cisco NX-OS=6.0\(2\)

Cisco NX-OS=6.0\(3\)

Cisco NX-OS=6.0\(4\)

Cisco NX-OS=6.1\(1\)

Cisco NX-OS=6.1\(2\)

Cisco NX-OS=6.1\(3\)

Cisco NX-OS=6.1\(4\)

Cisco NX-OS=6.1\(4a\)

Cisco NX-OS=6.1\(5\)

Cisco NX-OS=6.2\(2\)

Cisco NX-OS=6.2\(2a\)

Cisco NX-OS=6.2\(6\)

Cisco NX-OS=6.2\(6b\)

Cisco NX-OS=6.2\(8\)

Cisco NX-OS=6.2\(8a\)

Cisco NX-OS=6.2\(8b\)

Cisco NX-OS=6.2\(10\)

Cisco NX-OS=6.2\(12\)

Cisco NX-OS=6.2\(14\)s1

Cisco NX-OS=7.2\(0\)n1\(0.1\)

Cisco NX-OS=base

Cisco Nexus 7000 10-slot

Cisco Nexus 7000 18-slot

Cisco Nexus 7000 4-slot

Cisco Nexus 7000 9-slot

Cisco Nexus 7700 10-slot

Cisco Nexus 7700 18-slot

Cisco Nexus 7700 2-slot

Cisco Nexus 7700 6-slot

Cisco NX-OS=4.2\(1\)n1\(1\)

Cisco NX-OS=4.2\(1\)n2\(1\)

Cisco NX-OS=4.2\(1\)n2\(1a\)

Cisco NX-OS=5.0\(2\)n1\(1\)

Cisco NX-OS=5.0\(2\)n2\(1\)

Cisco NX-OS=5.0\(2\)n2\(1a\)

Cisco NX-OS=5.0\(3\)n1\(1c\)

Cisco NX-OS=5.0\(3\)n2\(1\)

Cisco NX-OS=5.0\(3\)n2\(2\)

Cisco NX-OS=5.0\(3\)n2\(2a\)

Cisco NX-OS=5.0\(3\)n2\(2b\)

Cisco NX-OS=5.1\(3\)n1\(1\)

Cisco NX-OS=5.1\(3\)n1\(1a\)

Cisco NX-OS=5.1\(3\)n2\(1\)

Cisco NX-OS=5.1\(3\)n2\(1a\)

Cisco NX-OS=5.1\(3\)n2\(1b\)

Cisco NX-OS=5.1\(3\)n2\(1c\)

Cisco NX-OS=5.2\(1\)n1\(1\)

Cisco NX-OS=5.2\(1\)n1\(1a\)

Cisco NX-OS=5.2\(1\)n1\(1b\)

Cisco NX-OS=5.2\(1\)n1\(2\)

Cisco NX-OS=5.2\(1\)n1\(2a\)

Cisco NX-OS=5.2\(1\)n1\(3\)

Cisco NX-OS=5.2\(1\)n1\(4\)

Cisco NX-OS=5.2\(1\)n1\(5\)

Cisco NX-OS=5.2\(1\)n1\(6\)

Cisco NX-OS=5.2\(1\)n1\(7\)

Cisco NX-OS=5.2\(1\)n1\(8\)

Cisco NX-OS=5.2\(1\)n1\(8a\)

Cisco Nexus 5010

Cisco Nexus 5020

Cisco Nexus 5548p

Cisco Nexus 5548up

Cisco Nexus 5596t

Cisco Nexus 5596up

Cisco Nexus 56128p

Cisco Nexus 5624q

Cisco Nexus 5648q

Cisco Nexus 5672up

Cisco Nexus 5672up-16g

Cisco Nexus 5696q

Cisco NX-OS=6.1\(2\)i2\(1\)

Cisco NX-OS=6.1\(2\)i2\(2\)

Cisco NX-OS=6.1\(2\)i2\(2a\)

Cisco NX-OS=6.1\(2\)i2\(2b\)

Cisco NX-OS=6.1\(2\)i2\(3\)

Cisco NX-OS=6.1\(2\)i3\(1\)

Cisco NX-OS=6.1\(2\)i3\(2\)

Cisco NX-OS=6.1\(2\)i3\(3\)

Cisco NX-OS=6.1\(2\)i3\(3.78\)

Cisco NX-OS=6.1\(2\)i3\(4\)

Cisco NX-OS=7.0\(3\)

Cisco Nexus 92160yc-x

Cisco Nexus 92304qc

Cisco Nexus 9236c

Cisco Nexus 9272q

Cisco Nexus 93108tc-ex

Cisco Nexus 93120tx

Cisco Nexus 93128tx

Cisco Nexus 93180yc-ex

Cisco Nexus 9332pq

Cisco Nexus 9336pq Aci Spine

Cisco Nexus 9372px

Cisco Nexus 9372tx

Cisco Nexus 9396px

Cisco Nexus 9396tx

Cisco Nexus 9504

Cisco Nexus 9508

Cisco Nexus 9516

Cisco NX-OS=6.0\(2\)n1\(2\)

Cisco NX-OS=6.0\(2\)n1\(2a\)

Cisco NX-OS=6.0\(2\)n2\(1\)

Cisco NX-OS=6.0\(2\)n2\(1b\)

Cisco NX-OS=6.0\(2\)n2\(2\)

Cisco NX-OS=6.0\(2\)n2\(3\)

Cisco NX-OS=6.0\(2\)n2\(4\)

Cisco NX-OS=6.0\(2\)n2\(5\)

Cisco NX-OS=6.0\(2\)n2\(5a\)

Cisco NX-OS=6.0\(2\)n2\(6\)

Cisco NX-OS=7.0\(0\)n1\(1\)

Cisco NX-OS=7.0\(1\)n1\(1\)

Cisco NX-OS=7.0\(2\)n1\(1\)

Cisco NX-OS=7.0\(3\)n1\(1\)

Cisco NX-OS=7.0\(4\)n1\(1\)

Cisco NX-OS=7.0\(5\)n1\(1\)

Cisco NX-OS=7.0\(5\)n1\(1a\)

Cisco NX-OS=7.1\(0\)n1\(1a\)

Cisco NX-OS=7.1\(0\)n1\(1b\)

Cisco Nexus 6001

Cisco Nexus 6004

Event History

Oct 6, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6392?

CVE-2015-6392 has been assigned a high severity rating due to its potential to cause a denial of service by crashing affected Cisco Nexus devices.

How do I fix CVE-2015-6392?

To mitigate CVE-2015-6392, upgrade the affected Cisco NX-OS devices to a patched version provided by Cisco.

Which devices are affected by CVE-2015-6392?

CVE-2015-6392 impacts multiple models of Cisco Nexus devices running NX-OS versions 4.1 through 7.3 and 11.0 through 11.2.

Can CVE-2015-6392 be exploited remotely?

Yes, CVE-2015-6392 can be exploited remotely through crafted IPv4 DHCP packets targeted at the vulnerable devices.

What are the potential impacts of CVE-2015-6392?

The exploitation of CVE-2015-6392 can lead to a denial of service, resulting in the affected device becoming unresponsive or crashing.

CVE-2015-6392: High severity cisco nx-os vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2015-6392?

How do I fix CVE-2015-6392?

Which devices are affected by CVE-2015-6392?

Can CVE-2015-6392 be exploited remotely?

What are the potential impacts of CVE-2015-6392?

Company

Resources

Contact