One Article Review
| Source |  Network World |
|---|---|
| Identifiant | 325590 |
| Date de publication | 2017-03-01 08:53:00 (vue: 2017-03-01 08:53:00) |
| Titre | Cisco warns of NetFlow appliance vulnerability |
| Texte | Cisco today issued a security warning about a potential vulnerability in its NetFlow traffic monitoring device that could cause the system to lock-up. +More on Network World: Cisco tries to squash Smart Install security abuse+ Specifically, Cisco wrote: “A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NGA) could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service (DoS) condition. The vulnerability is due to incomplete validation of SCTP packets being monitored on the NGA data ports. An attacker could exploit this vulnerability by sending malformed SCTP packets on a network that is monitored by an NGA data port. SCTP packets addressed to the IP address of the NGA itself will not trigger this vulnerability. An exploit could allow the attacker to cause the appliance to become unresponsive or reload, causing a DoS condition. User interaction could be needed to recover the device using the reboot command from the CLI.â€To read this article in full or to leave a comment, please click here |
| Envoyé | Oui |
| Condensat | +more about abuse+ address addressed allow appliance article attacker become being cause causing cisco cli click command comment condition control could data decoder denial device dos due exploit from full generation hang here incomplete install interaction issued its itself leave lock malformed monitored monitoring needed netflow network nga not packets please port ports potential protocol read reboot recover reload remote sctp security sending service smart specifically squash stream system today traffic transmission tries trigger unauthenticated unexpectedly unresponsive user using validation vulnerability warning warns will world: wrote: â€Âto “a |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.