CVE-2018-0309 (CNNVD-201806-1123)
中文标题:
Cisco Nexus 3000和9000 Series Switches NX-OS 安全漏洞
英文标题:
A vulnerability in the implementation of a specific CLI command and the associated Simple Network Ma...
漏洞描述
中文描述:
Cisco Nexus 3000和9000 Series Switches都是美国思科（Cisco）公司的不同系列的交换机设备。NX-OS是运行在其中的一套交换机使用的数据中心级操作系统软件。 Cisco Nexus 3000和9000 Series Switches中的NX-OS(在standalone NX-OS模式下)的CLI命令及相关联的Simple Network Management Protocol (SNMP) MIB的实现存在拒绝服务漏洞，该漏洞源于程序没有正确的实现CLI命令。远程攻击者可通过对受影响的设备进行身份验证并重复的发布CLI命令或SNMP轮询请求利用该漏洞造成系统内存耗尽。
英文描述:
A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (SNMP) MIB for Cisco NX-OS (in standalone NX-OS mode) on Cisco Nexus 3000 and 9000 Series Switches could allow an authenticated, remote attacker to exhaust system memory on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to the incorrect implementation of the CLI command, resulting in a failure to free all allocated memory upon completion. An attacker could exploit this vulnerability by authenticating to the affected device and repeatedly issuing a specific CLI command or sending a specific SNMP poll request for a specific Object Identifier (OID). A successful exploit could allow the attacker to cause the IP routing process to restart or to cause a device reset, resulting in a DoS condition. Cisco Bug IDs: CSCvf23136.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | nx-os | 7.0\(3\)i5\(2\) | - | - |
cpe:2.3:o:cisco:nx-os:7.0\(3\)i5\(2\):*:*:*:*:*:*:*
|
| cisco | nx-os | 7.0\(3\)i6\(1\) | - | - |
cpe:2.3:o:cisco:nx-os:7.0\(3\)i6\(1\):*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2018-0309 |
2025-11-11 15:19:35 | 2025-11-11 07:34:57 |
| NVD | nvd_CVE-2018-0309 |
2025-11-11 14:55:55 | 2025-11-11 07:43:33 |
| CNNVD | cnnvd_CNNVD-201806-1123 |
2025-11-11 15:10:02 | 2025-11-11 07:53:46 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 资源管理错误
- cnnvd_id: 未提取 -> CNNVD-201806-1123
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.7
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 0 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']