CVE-2015-4323
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices 4.1(2)E1(1b); Nexus 7000 devices 6.2(14)S1; Nexus 9000 devices 7.3(0)ZN(0.9); and MDS 9000 devices 6.2 (13) and 7.1(0)ZN(91.99) and MDS SAN-OS 7.1(0)ZN(91.99) allows remote attackers to cause a denial of service (device outage) via a crafted ARP packet, related to incorrect MTU validation, aka Bug IDs CSCuv71933, CSCuv61341, CSCuv61321, CSCuu78074, CSCut37060, CSCuv61266, CSCuv61351, CSCuv61358, and CSCuv61366.
Published:Aug 19, 2015
Last Modified:Apr 12, 2025
EPS:Aug 19, 2015
EPSS Score:0.00806
CVSS Score:6.1
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Mds 9000 Nx-os
Cisco
Mds 9000 Nx-os
Vendor
Cisco
Product
Nexus 1000v
Cisco
Nexus 1000v
Vendor
Cisco
Product
Nexus 3016
Cisco
Nexus 3016
Vendor
Cisco
Product
Nexus 3048
Cisco
Nexus 3048
Vendor
Cisco
Product
Nexus 3064
Cisco
Nexus 3064
Vendor
Cisco
Product
Nexus 31128pq
Cisco
Nexus 31128pq
Vendor
Cisco
Product
Nexus 3132q
Cisco
Nexus 3132q
Vendor
Cisco
Product
Nexus 3164q
Cisco
Nexus 3164q
Vendor
Cisco
Product
Nexus 3172
Cisco
Nexus 3172
Vendor
Cisco
Product
Nexus 3232c
Cisco
Nexus 3232c
Vendor
Cisco
Product
Nexus 3264q
Cisco
Nexus 3264q
Vendor
Cisco
Product
Nexus 3524
Cisco
Nexus 3524
Vendor
Cisco
Product
Nexus 3548
Cisco
Nexus 3548
Vendor
Cisco
Product
Nexus 4001i
Cisco
Nexus 4001i
Vendor
Cisco
Product
Nexus 7000
Cisco
Nexus 7000
Vendor
Cisco
Product
Nexus 7700
Cisco
Nexus 7700
Vendor
Cisco
Product
Nexus 93120tx
Cisco
Nexus 93120tx
Vendor
Cisco
Product
Nexus 93128tx
Cisco
Nexus 93128tx
Vendor
Cisco
Product
Nexus 9332pq
Cisco
Nexus 9332pq
Vendor
Cisco
Product
Nexus 9336pq Aci Spine
Cisco
Nexus 9336pq Aci Spine
Vendor
Cisco
Product
Nexus 9372px
Cisco
Nexus 9372px
Vendor
Cisco
Product
Nexus 9372tx
Cisco
Nexus 9372tx
Vendor
Cisco
Product
Nexus 9396px
Cisco
Nexus 9396px
Vendor
Cisco
Product
Nexus 9396tx
Cisco
Nexus 9396tx
Vendor
Cisco
Product
Nexus 9504
Cisco
Nexus 9504
Vendor
Cisco
Product
Nexus 9508
Cisco
Nexus 9508
Vendor
Cisco
Product
Nexus 9516
Cisco
Nexus 9516
Vendor
Cisco
Product
Nx-os
Cisco
Nx-os
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
