Description
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to the management interface of an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Note: Only the out-of-band (OOB) management interface is affected.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco NX-OS System Software in ACI Mode
Default version status: unknown
15.2(1g)affected15.2(2e)affected15.2(2f)affected15.2(2g)affected15.2(2h)affected15.2(3f)affected15.2(3e)affected15.2(3g)affected15.2(4d)affected15.2(4e)affected15.2(5c)affected15.2(5d)affected16.0(1g)affected15.2(5e)affected15.2(4f)affected15.2(6e)affected15.2(6h)affected16.0(1j)affected15.2(6g)affected15.2(7f)affected15.2(7g)affected16.0(2h)affected15.2(8d)affected16.0(2j)affected15.2(8e)affected16.0(3d)affected16.0(3e)affected15.2(8f)affected15.2(8g)affected15.3(1d)affected15.2(8h)affected16.0(4c)affected15.3(2a)affected15.2(8i)affected16.0(5h)affected15.3(2b)affected16.0(3g)affected16.0(5j)affected15.3(2c)affected16.0(6c)affected15.3(2d)affected16.1(1f)affected16.0(7e)affected16.0(8e)affected15.3(2e)affected16.0(8f)affected16.1(2f)affected16.1(2g)affected15.3(2f)affected16.0(9c)affected16.1(3f)affected16.0(9d)affected16.0(6h)affected16.0(8h)affected16.1(3g)affected16.0(9e)affected16.1(4h)affected