cisco-sa-20180620-fxnxos-ace: Cisco FXOS and NX-OS Software Cisco Fabric Services Arbitrary Code Execution Vulnerability
First published: Wed Jun 20 2018(Updated: )
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to read sensitive memory content, create a denial of service (DoS) condition, or execute arbitrary code as root. The vulnerability exists because the affected software insufficiently validates Cisco Fabric Services packet headers. An attacker could exploit this vulnerability by sending a crafted Cisco Fabric Services packet to an affected device. A successful exploit could allow the attacker to cause a buffer overflow or buffer overread condition in the Cisco Fabric Services component, which could allow the attacker to read sensitive memory content, create a DoS condition, or execute arbitrary code as root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-fxnxos-ace This advisory is part of the June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection, which includes 24 Cisco Security Advisories that describe 24 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FXOS Software | =2.2.2<2.2.2.17=2.2.1<2.2.1.70=2.1.1<2.1.1.86=2.0<2.0.1.153=1.1<1.1.4.179 | 2.2.2.17 2.2.1.70 2.1.1.86 2.0.1.153 1.1.4.179 |
| Cisco NX-OS Software | =8.1<8.1(1a)=7.3<8.1(1a)=6.2<6.2(21)=5.2<6.2(21) | 8.1(1a) 8.1(1a) 6.2(21) 6.2(21) |
| Cisco NX-OS Software | ||
| Cisco NX-OS Software | =6.2<6.2(20)=Prior to 6.2<6.2(20) | 6.2(20) 6.2(20) |
| Cisco NX-OS Software | =3.2<3.2(2b)=3.1<3.2(2b)=3.0<3.2(2b)=2.5<3.2(2b)=2.2<3.2(2b)=Prior to 2.2<3.2(2b) | 3.2(2b) 3.2(2b) 3.2(2b) 3.2(2b) 3.2(2b) 3.2(2b) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco FXOS and NX-OS Software vulnerability?
The vulnerability ID is cisco-sa-20180620-fxnxos-ace.
What is the severity of vulnerability cisco-sa-20180620-fxnxos-ace?
The severity of vulnerability cisco-sa-20180620-fxnxos-ace is critical (9.8).
What is affected by vulnerability cisco-sa-20180620-fxnxos-ace?
The affected software includes Cisco FXOS Software versions 2.2.2.17, 2.2.1.70, 2.1.1.86, 2.0.1.153, and 1.1.4.179, as well as Cisco NX-OS Software versions 8.1(1a), 6.2(21), and 6.2(20).
How does vulnerability cisco-sa-20180620-fxnxos-ace impact the system?
Vulnerability cisco-sa-20180620-fxnxos-ace could allow an unauthenticated, remote attacker to read sensitive memory content, create a denial of service (DoS) condition, or execute arbitrary code as root.
Where can I find more information about vulnerability cisco-sa-20180620-fxnxos-ace?
More information about vulnerability cisco-sa-20180620-fxnxos-ace can be found at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-fxnxos-ace.
- agent/references
- agent/weakness
- agent/severity
- agent/title
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco fxos software
- version/cisco fxos software/2.2.2
- version/cisco fxos software/2.2.1
- version/cisco fxos software/2.1.1
- version/cisco fxos software/2.0
- version/cisco fxos software/1.1
- canonical/cisco nx-os software
- version/cisco nx-os software/8.1
- version/cisco nx-os software/7.3
- version/cisco nx-os software/6.2
- version/cisco nx-os software/5.2
- version/cisco nx-os software/prior to 6.2
- version/cisco nx-os software/3.2
- version/cisco nx-os software/3.1
- version/cisco nx-os software/3.0
- version/cisco nx-os software/2.5
- version/cisco nx-os software/2.2
- version/cisco nx-os software/prior to 2.2