Authentication Vulnerability in Cisco Firepower and NX-OS Systems

CVE-2017-3883

What is CVE-2017-3883?

An authentication vulnerability exists in the AAA implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software, which may allow unauthenticated remote attackers to cause impacted devices to reload. This issue is triggered when a high volume of login attempts prevents the NX-OS System Manager from receiving keepalive messages, potentially leading to low system memory and unexpected restarts of the AAA process. Attackers may exploit this issue by executing a brute-force login attack against devices configured with AAA security services, resulting in device reloads.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References