Mageni can help you to save time and money
Mageni automates for you the vulnerability scanning, assessment and management process saving you a ton of time, resources, and money. Mageni is used by companies of all sizes. You will love Mageni's powerful features and ease of use. No registration or credit card is required.
Download Now
Cisco NX-OS Software DHCP Options Command Injection Vulnerability
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
A vulnerability in DHCP code used with PowerOn Auto Provisioning (POAP) of Cisco NX-OS could allow an unauthenticated, adjacent attacker to inject arbitrary commands into the Cisco NX-OS device. The vulnerability is due to insufficient input validation of the DHCP options returned as a result of POAP. An attacker could exploit this vulnerability by responding to the initial DHCP request initiated as part of POAP with crafted DHCP packets. An exploit could allow the attacker to execute arbitrary commands in the security context of the root user. The attack can occur during the POAP initialization process. Cisco has confirmed the vulnerability and released software updates. To exploit this vulnerability, an attacker must be on the same broadcast or collision domain as the affected device. This access requirement could decrease the likelihood of a successful exploit.
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
See the referenced vendor advisory for a solution.
Common Vulnerabilities and Exposures (CVE)
Automate with a few clicks your vulnerability scanning, assessment and management process
Automate with a few clicks your vulnerability scanning, assessment and management process
Mageni automates for you the vulnerability scanning, assessment and management process saving you a ton of time, resources, and money. No registration or credit card is required. Mageni Community Edition is fast, powerful, free, and open-source. Download it now and Mageni will find your vulnerabilities before they are exploited by hackers.
1. Download Multipass
2. Launch a multipass instance
3. Install Mageni
1. If you don’t have it already, install Brew. Then, to install Multipass simply execute:
2. Launch a multipass instance
2. Install Mageni
1. Download the installer for Windows
2. Ensure your network is private
3. Run the installer
4. Launch a multipass instance
5. Log into the multipass instance
6. Install Mageni