Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-6277

The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and MDS 9000 devices 7.0(0)HSK(0.353) and SAN-OS NX-OS on MDS 9000 devices 7.0(0)HSK(0.353) allows remote attackers to cause a denial of service (ARP process restart) via crafted packet-header fields, aka Bug ID CSCut25292.

Published

2015-09-02T16:59:03.907

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.1 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.5

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-399
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco nx-os 7.3\(0\)zd\(0.47\) Yes
Hardware cisco nexus_3000 - No
Operating System cisco nx-os 4.1\(2\)e1 Yes
Hardware cisco nexus_4000 - No
Operating System cisco nx-os 7.0\(0\)hsk\(0.353\) Yes
Operating System cisco san-os 7.0\(0\)hsk\(0.353\) Yes
Hardware cisco mds_9000 - Yes
Operating System cisco nx-os 7.3\(0\)zd\(0.61\) Yes
Hardware cisco nexus_9000 - No
Application cisco 1000v 5.2\(1\)sv3\(1.4\) Yes
References