A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update messages. An attacker could exploit this vulnerability by sending a crafted BGP update message to the targeted device. An exploit could allow the attacker to cause the switch to reload unexpectedly. The Cisco implementation of the BGP protocol only accepts incoming BGP traffic from explicitly defined peers. To exploit this vulnerability, an attacker must be able to send the malicious packets over a TCP connection that appears to come from a trusted BGP peer or inject malformed messages into the victim's BGP network. This would require obtaining information about the BGP peers in the affected system's trusted network. The vulnerability may be triggered when the router receives a malformed BGP message from a peer on an existing BGP session. At least one BGP neighbor session must be established for a router to be vulnerable. This vulnerability affects Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 3600 Platform Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve79599, CSCve87784, CSCve91371, CSCve91387.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

根據其自我報告的版本，Cisco NX-OS 系統的邊界閘道通訊協定中有一個分佈式拒絕服務 (DoS) 弱點，這是因為未對 BGP 更新訊息進行完整的輸入驗證所致。未經驗證的遠端攻擊者可惡意利用此問題，造成裝置意外重新載入，進而導致 DoS 情形。

如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告。

根据其自我报告的版本，Cisco NX-OS 软件受到边界网关协议中的分布式拒绝服务 (DDoS) 漏洞影响，这是对 BGP 更新消息的输入验证不完整所致。未经身份验证的远程攻击者可利用此问题造成拒绝服务 (DoS) 情形，这是设备意外重新加载所致。

若要了解更多信息，请参见所附的 Cisco BID 和 Cisco 安全公告。

自己報告されたバージョンによると、Cisco NX-OSソフトウェアは、BGP更新メッセージの入力検証が不完全なため、ボーダーゲートウェイプロトコルにおける分散型サービス拒否（DoS）の脆弱性の影響を受けます。認証されていないリモートの攻撃者が、この問題を悪用してデバイスを予期せずリロードさせ、サービス拒否（DoS）状態を引き起こす可能性があります。

詳細については、付属の Cisco BID および Cisco Security Advisory を参照してください。

According to its self-reported version, Cisco NX-OS Software is affected by a distributed denial of service (DDoS) vulnerability in the Border Gateway Protocol due to incompleteinput validation of the BGP update messages. An unauthenticated, remote attacker can exploit this to cause a denial of service (DoS) condition due to the device unexpectedly reloading.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
501319	Cisco NX-OS Software Border Gateway Protocol Denial of Service (CVE-2018-0295)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	high
138351	Cisco NX-OS 邊界閘道通訊協定 DoS (cisco-sa-20180620-nxosbgp)	Nessus	CISCO	2020/7/9	2020/7/10	high
138351	Cisco NX-OS 软件边界网关协议拒绝服务漏洞 (cisco-sa-20180620-bgp)	Nessus	CISCO	2020/7/9	2020/7/10	high
138351	Cisco NX-OSソフトウェアボーダーゲートウェイプロトコルにおけるDoS（cisco-sa-20180620-nxosbgp）	Nessus	CISCO	2020/7/9	2020/7/10	high
138351	Cisco NX-OS Software Border Gateway Protocol DoS (cisco-sa-20180620-nxosbgp)	Nessus	CISCO	2020/7/9	2020/7/10	high

检测

插件搜索

high

high

high

high

high