First published: Wed Feb 24 2021(Updated: )
A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted PIM packet to an affected device. A successful exploit could allow the attacker to cause a traffic loop, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-pim-dos-Y8SjMz4
Credit: This vulnerability was found during the resolution a Cisco TAC support case
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco NX-OS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of cisco-sa-nxos-pim-dos-Y8SjMz4 is classified as high due to its potential to cause a denial of service.
To fix cisco-sa-nxos-pim-dos-Y8SjMz4, it is recommended to apply the latest patches or updates provided by Cisco.
The vulnerability cisco-sa-nxos-pim-dos-Y8SjMz4 is caused by insufficient input validation in the Protocol Independent Multicast feature.
Devices running Cisco NX-OS Software that utilize the Protocol Independent Multicast feature are affected by cisco-sa-nxos-pim-dos-Y8SjMz4.
No, cisco-sa-nxos-pim-dos-Y8SjMz4 requires an unauthenticated, adjacent attacker to exploit the vulnerability.