CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-09-29
Cisco Catalyst 6800 Switches VPLS Memory Management Vulnerability (CVE-2017-12238) Analysis and Mitigation Guide
[Affected Scope] Cisco Catalyst 6800 Series Switches running Cisco IOS 15.0 through 15.4, equipped with Supervisor Engine 6T and C6800-16P10G or C6800-16P10G-XL line cards configured as core-facing MPLS interfaces with VPLS enabled.
[Impact] An unauthenticated, adjacent attacker can flood the device with VPLS-generated MAC entries, causing the affected line card to crash and resulting in a complete Denial of Service (DoS) condition.
[Mitigation] Upgrade to a fixed Cisco IOS software release addressing Cisco Bug ID CSCva61927, or implement MAC address learning limits on VPLS VFIs as a temporary workaround.