Cisco FXOS / NX-OS AAA: AAA implementation flaw enabling remote DoS via brute-force login attempts against the switch

CVE-2017-3883Firmware, BMC & network fabriccurated

Impact

AAA implementation flaw enabling remote DoS via brute-force login attempts against the switch management plane

Who can reach it

Network, unauthenticated

What to do

NX-OS/FXOS upgrade; also a reason to keep switch management auth off any tenant-reachable path

References

https://nvd.nist.gov/vuln/detail/CVE-2017-3883

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.