Buffer Overflow Vulnerability in Cisco Nexus Switches' IGMP Snooping Feature

CVE-2018-0292

What is CVE-2018-0292?

A buffer overflow vulnerability in the IGMP Snooping feature of Cisco's NX-OS Software allows an unauthenticated adjacent attacker to send crafted IGMP packets. This could lead to arbitrary code execution and complete control over affected Nexus Switches, or potentially trigger a denial of service (DoS) by causing the system to reload unexpectedly. The vulnerability impacts a range of Nexus Switch models, including those in both ACI mode and standalone NX-OS mode, posing significant risks to network security.

References