Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME_WAIT TCP session, aka Bug ID CSCub70579.

The remote Cisco Nexus device is affected by a denial of service vulnerability due to improper processing of certain TCP packets in the closing sequence of a TCP session while the affected device is in a TIME_WAIT state. An unauthenticated, remote attacker can exploit this vulnerability, by sending a crafted sequence of TCP packets when the device is in a TIME_WAIT state, to cause a reload of the TCP stack, resulting in a denial of service condition.

Detections

Analytics

CVE-2015-0718

high

Tenable Plugins

high