Cisco FXOS and NX-OS Software Vulnerability in Discovery Protocol

CVE-2018-0303

What is CVE-2018-0303?

A vulnerability exists in the Cisco Discovery Protocol component of Cisco FXOS and NX-OS Software due to insufficient validation of packet headers. This flaw allows an adjacent attacker to send specially crafted packets, potentially leading to arbitrary code execution as root or causing a denial of service (DoS) on affected devices. Devices using the affected protocol are at risk if they accept crafted Cisco Discovery Protocol packets from local network segments. A successful exploitation could compromise device integrity and availability.

References