Medium severity · published Jun 13, 2017
CVE-2017-6655
A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of…
6.5
CVSS
0.7%
EPSS
No
On KEV
Description
A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software on the following Cisco devices when they are configured for FCoE: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches. More Information: CSCvc91729. Known Affected Releases: 8.3(0)CV(0.833). Known Fixed Releases: 8.3(0)ISH(0.62) 8.3(0)CV(0.944) 8.1(1) 8.1(0.8)S0 7.3(2)D1(0.47).
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M9
Mds 9000 Nx-os · Cisco
7.3(1)d1(1) · source: NVD
NX
Nx-os · Cisco
8.0(1)s2; 8.3(0)cv(0.833) · source: NVD
NF
Nx-os For Nexus 5500 Platform Switches · Cisco
7.3(1)n1(1) · source: NVD
NF
Nx-os For Nexus 5600 Platform Switches · Cisco
7.3(1)n1(1) · source: NVD
NF
Nx-os For Nexus 7700 Series Switches · Cisco
8.0(1)(ed) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-6655
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-6655
Third Party Advisory
http://www.securityfocus.com/bid/98991
Third Party Advisory
http://www.securitytracker.com/id/1038628
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-nxos
More from Mds 9000 Nx-os
–
CVE-2015-4323
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices…
–
CVE-2015-0775
The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS…
–
CVE-2012-1340
The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service (module reload) via…