自己報告されたバージョンによると、Cisco FXOSソフトウェアとCisco NX-OSソフトウェアは複数の脆弱性の影響を受け、認証されていないリモートの攻撃者がサービス拒否攻撃（DoS）を引き起こす可能性があります。この脆弱性は、影響を受けるデバイスによってLDAPパケットが不適切に解析されるためです。攻撃者がこの脆弱性を悪用し、Basic Encoding Rules（BER）を使用して影響を受けるデバイスに細工されたLDAPパケットを送信する可能性があります。LDAPパケットには、標的のデバイスに設定されているLDAPサーバーの送信元IPアドレスが必要です。悪用に成功すると、影響を受けるデバイスがリロードされ、DoS状態を引き起こす可能性があります。詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください

According to its self-reported version, Cisco FXOS Software and Cisco NX-OS Software are affected by multiple vulnerabilities which could allow an unauthenticated, remote attacker to cause a denial of service attack (DoS).
The vulnerabilities are due to the improper parsing of LDAP packets by an affected device. An attacker could exploit these vulnerabilities by sending an LDAP packet crafted using Basic Encoding Rules (BER) to an affected device. The LDAP packet must have a source IP address of an LDAP server configured on the targeted device. A successful exploit could cause the affected device to reload, resulting in a DoS condition.

Please see the included Cisco BIDs and Cisco Security Advisory for more information

根据其自我报告的版本，Cisco FXOS 软件和 Cisco NX-OS 软件受到多个漏洞影响，允许未经身份验证的远程攻击者造成拒绝服务攻击 (DoS)。这些漏洞存在的原因是受影响设备未正确解析 LDAP 数据包。攻击者可通过使用基本编码规则 (BER) 将特制 LDAP 数据包发送至受影响设备，以恶意利用这些漏洞。LDAP 数据包必须具有目标设备上配置的 LDAP 服务器来源 IP 地址。若成功利用此漏洞，即可造成受影响的设备重新加载，进而导致 DoS 情形。若要了解更多信息，请参见所附的 Cisco BID 和 Cisco 安全公告

根據其自我報告的版本，Cisco FXOS 軟體和 Cisco NX-OS 軟體受到多個弱點影響，未經驗證的遠端攻擊者可藉以造成拒絕服務攻擊 (DoS)。這些弱點之所以存在，是因為受影響裝置未正確剖析 LDAP 封包所致。攻擊者可使用基本編碼規則 (BER) 將特製 LDAP 封包傳送至受影響裝置，藉以惡意利用這些弱點。LDAP 封包必須有在目標裝置上設定的 LDAP 伺服器來源 IP 位址。若惡意利用得逞，即可造成受影響裝置重新載入，進而導致 DoS 情形。如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告

Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of LDAP packets by an affected device. An attacker could exploit these vulnerabilities by sending an LDAP packet crafted using Basic Encoding Rules (BER) to an affected device. The LDAP packet must have a source IP address of an LDAP server configured on the targeted device. A successful exploit could cause the affected device to reload, resulting in a DoS condition. Firepower 4100 Series Next- Generation Firewalls are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. Firepower 9300 Security Appliances are affected in versions prior to 2.0.1.201, 2.2.2.54 and 2.3.1.75. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.2(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(2). Nexus 7000 and 7700 Series Switches are affected in versions prior to 8.2(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(1). Cisco UCS 6200 and 6300 Fabric Interconnect devices are affected in versions prior to 3.2(2b).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
125391	Cisco FXOSおよびNX-OSのLDAP（Lightweight Directory Access Protocol）サービス拒否の脆弱性	Nessus	CISCO	2019/5/24	2024/5/21	high
125391	Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities	Nessus	CISCO	2019/5/24	2024/5/21	high
125391	Cisco FXOS 和 NX-OS 轻型目录访问协议拒绝服务漏洞	Nessus	CISCO	2019/5/24	2024/5/21	high
125391	Cisco FXOS 和 NX-OS 輕量目錄存取通訊協定拒絕服務弱點	Nessus	CISCO	2019/5/24	2024/5/21	high
501413	Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service (CVE-2019-1597)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	high

検出

プラグインの検索

high

high

high

high

high