certfr_avis - certfr-2020-avi-330

CERTFR-2020-AVI-330

Vulnerability from certfr_avis

Une vulnérabilité a été découverte dans Cisco NX-OS. Elle permet à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Cisco	NX-OS	Cisco UCS versions 4.0.x antérieures à 4.0(4i) (disponible courant juin 2020)
Cisco	NX-OS	Cisco NX-OS versions antérieures à 7.3(6)D1(1) sur les commutateurs Cisco Nexus séries 7000
Cisco	NX-OS	Cisco UCS versions 4.1.x antérieures à 4.1(1d) (disponible courant juin 2020)
Cisco	NX-OS	Cisco UCS versions antérieures à 3.2(3o)

References

Title

Publication Time

Tags

Bulletin de sécurité Cisco cisco-sa-nxos-ipip-dos-kCT9X4 du 01 juin 2020

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco UCS versions 4.0.x ant\u00e9rieures \u00e0 4.0(4i) (disponible courant juin 2020)",
      "product": {
        "name": "NX-OS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco NX-OS versions ant\u00e9rieures \u00e0 7.3(6)D1(1) sur les commutateurs Cisco Nexus s\u00e9ries 7000",
      "product": {
        "name": "NX-OS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco UCS versions 4.1.x ant\u00e9rieures \u00e0 4.1(1d) (disponible courant juin 2020)",
      "product": {
        "name": "NX-OS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco UCS versions ant\u00e9rieures \u00e0 3.2(3o)",
      "product": {
        "name": "NX-OS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-10136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10136"
    }
  ],
  "initial_release_date": "2020-06-02T00:00:00",
  "last_revision_date": "2020-06-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-330",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-06-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Cisco NX-OS. Elle permet \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance et un contournement\nde la politique de s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Cisco NX-OS",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-nxos-ipip-dos-kCT9X4 du 01 juin 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4"
    }
  ]
}

CVE-2020-10136 (GCVE-0-2020-10136)

Vulnerability from cvelistv5

Published

2020-06-02 08:35

Modified

2024-09-17 00:56

Severity ?

CWE

CWE-290 - Authentication Bypass by Spoofing

Summary

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

References

URL

Tags

	https://kb.cert.org/vuls/id/636397/
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4
	https://www.digi.com/resources/security
	https://www.kb.cert.org/vuls/id/636397
	https://datatracker.ietf.org/doc/html/rfc6169

Impacted products

	Vendor	Product	Version
	IETF	RFC2003 - IP Encapsulation within IP	Version: STD 1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:50:57.823Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#636397",
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.cert.org/vuls/id/636397/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.digi.com/resources/security"
          },
          {
            "name": "VU#636397",
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/636397"
          },
          {
            "name": "Security Concerns with IP Tunneling",
            "tags": [
              "x_transferred"
            ],
            "url": "https://datatracker.ietf.org/doc/html/rfc6169"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "RFC2003 - IP Encapsulation within IP",
          "vendor": "IETF",
          "versions": [
            {
              "status": "affected",
              "version": "STD 1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thanks to Yannay Livneh for reporting this issue."
        }
      ],
      "datePublic": "2020-06-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290 Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-17T21:10:04.191Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "VU#636397",
          "url": "https://kb.cert.org/vuls/id/636397/"
        },
        {
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4"
        },
        {
          "url": "https://www.digi.com/resources/security"
        },
        {
          "name": "VU#636397",
          "url": "https://www.kb.cert.org/vuls/id/636397"
        },
        {
          "name": "Security Concerns with IP Tunneling",
          "url": "https://datatracker.ietf.org/doc/html/rfc6169"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Customers should apply the latest patch provided by the affected vendor that addresses this issue and prevents unspecified IP-in-IP packets from being processed. Devices manufacturers are urged to disable IP-in-IP in their default configuration and require their customers to explicitly configure IP-in-IP as and when needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic",
      "workarounds": [
        {
          "lang": "en",
          "value": "Users can block IP-in-IP packets by filtering IP protocol number 4. Note this filtering is for the IPv4 Protocol (or IPv6 Next Header) field value of 4 and not IP protocol version 4 (IPv4)."
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.15"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2020-10136",
    "datePublished": "2020-06-02T08:35:12.921954Z",
    "dateReserved": "2020-03-05T00:00:00",
    "dateUpdated": "2024-09-17T00:56:11.850Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTFR-2020-AVI-330

Vulnerability from certfr_avis

Solution

CVE-2020-10136 (GCVE-0-2020-10136)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature