cisco-sa-VU855201-J3z8CKTX: Vulnerabilities in Layer 2 Network Security Controls Affecting Cisco Products: September 2022
First published: Tue Sep 27 2022(Updated: )
On September 27, 2022, the following vulnerabilities affecting Cisco products were disclosed by Cert/CC as part of VU855201, titled L2 network security controls can be bypassed using VLAN 0 stacking and/or 802.3 headers: Exploitation of these vulnerabilities could allow an adjacent attacker to bypass configured first-hop security (FHS) features on the affected Cisco products. For more information about these vulnerabilities, see the Details section of this advisory. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-VU855201-J3z8CKTX
Credit: Etienne Champetier for reporting these vulnerabilities Cert/CC for the coordination.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Products | =Cisco IOS XE Switches<CSCvz91291 | CSCvz91291 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of cisco-sa-VU855201-J3z8CKTX?
The severity of cisco-sa-VU855201-J3z8CKTX is categorized as high due to the potential for network security controls to be bypassed.
How do I fix cisco-sa-VU855201-J3z8CKTX?
To fix cisco-sa-VU855201-J3z8CKTX, update to the latest version of Cisco IOS XE Switches that addresses the vulnerabilities.
What products are affected by cisco-sa-VU855201-J3z8CKTX?
Cisco IOS XE Switches are the primary affected products outlined in cisco-sa-VU855201-J3z8CKTX.
Can cisco-sa-VU855201-J3z8CKTX exploits be mitigated?
Employing strict network segmentation and access controls can help mitigate the risks associated with cisco-sa-VU855201-J3z8CKTX.
Is there a specific patch for cisco-sa-VU855201-J3z8CKTX?
Yes, a specific remedy is available with the fix indicated as CSCvz91291 in cisco-sa-VU855201-J3z8CKTX.
- agent/author
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/references
- agent/title
- agent/weakness
- agent/remedy
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco products
- version/cisco products/cisco ios xe switches