Cisco FXOS and NX-OS Software Cisco Fabric Services Arbitrary Code Execution Vulnerability
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The vulnerability exists because the affected software insufficiently validates header values in Cisco Fabric Services packets. An attacker could exploit this vulnerability by sending a crafted Cisco Fabric Services packet to an affected device. A successful exploit could allow the attacker to cause a buffer overflow that could allow the attacker to execute arbitrary code or cause a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-fxnxos-fab-ace ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-fxnxos-fab-ace"] This advisory is part of the June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection, which includes 24 Cisco Security Advisories that describe 24 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-67770"].
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0308US | critical9.8 | — | ||
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or… | ||||
references
External citations — patches, advisories, analysis.
- CSCvd69954external
- CSCve02463external
- CSCve02785external
- CSCve02787external
- CSCve02804external
- CSCve04859external
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-fxnxos-fab-aceexternal
- Security Vulnerability Policyexternal
remediations (26)
- Fixed2.0.1.68
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N1(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N1(2a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(1b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(4)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(5)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(5a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(6)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0(2)N2(7)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.1(2)I1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.1(2)I3(3.78)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.1(2)I3(3b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(2)I2(2c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(2)N1(1a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(6)N1(1c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.1(0)N1(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.1(3)N1(1b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.1(4)N1(1e)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.3(1)D1(1B)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.3(1)N1(0.1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Unified Computing System (Managed)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan