The Cisco Nexus 5000 detected a dangerous gap – securitylab

The flaw allows unauthorized local user to cause a denial of service.

networking vendor Cisco has reported a vulnerability (CVE -2015-6394) in the USB-driver series switches Nexus 5000. The flaw allows unauthorized local user to cause a denial of service. The problem affects products Cisco Nexus 5000 software-based Cisco NX-OS version 5.2 (9) N1 (1).

According to the security bulletin producer vulnerability is caused due to improper handling of input parameters USB. This can be exploited proekspluatirovat gap by sending a specially crafted packet with the parameters of the USB processing core of the device and thereby cause a failure of the target device.

Currently, Cisco specialists are working to resolve the problem. Details of the vulnerability are not yet known.

The Cisco Nexus 5000 – Equipment level Enterprise, designed to optimize the network architecture of the data center with a high load.