Menu
Cisco discloses three router security problems

Cisco discloses three router security problems

Cisco is warning of three vulnerabilities within its IOS software that could lead to a denial-of-service attack or let an attacker run arbitrary code.

Cisco Systems is warning of three vulnerabilities within its Internet Operating System (IOS) software that could allow a denial-of-service (DOS) attack or let a hacker run arbitrary code on an affected switch router.

The company has published workarounds and issued an updated version of the software.

The three problems are:

-- TCP packet problem: A memory leak in certain versions of IOS could lead to a DOS attack, according to an advisory from the U.S. Computer Emergency Readiness Team. (CERT)

-- IPv6 router header vulnerability: IOS can fail to properly process IPv6 (Internet Protocol version 6) packets with specially-crafted routing heads, which could allow a DOS attack or the running of arbitrary code. IPv6 is a set of specifications that enables more IP addresses to be available on the Internet.

-- Crafted IP option vulnerability: This is a bug concerning how IOS processes IPv4 packets with a specially-crafted IP option, CERT said. It could also enable a DOS attack or the running of arbitrary code.

CERT wrote that all three vulnerabilities could cause a device to reload its OS. In that case, a secondary, sustained DOS condition could be caused since packets won't go through the device.

"Because devices running IOS may transmit traffic for a number of other networks, the secondary impacts of a denial of service may be severe," CERT said.


Follow Us

Join the newsletter!

Error: Please check your email address.

Featured

Slideshows

A snapshot of the Kiwi partners set to shine at the Reseller News Awards

A snapshot of the Kiwi partners set to shine at the Reseller News Awards

With the 2017 Reseller News ICT Industry Awards only weeks away, Reseller News profiles the power line-up of partners set to dominate the biggest night on the channel calendar. ​Ranging from the enterprise, down through the mid-market and small business sectors into the heart of the start-up scene, the end result is the most diverse and wide-ranging partner line-up in the history of the Awards, playing host to the leading innovators of the past 12 months.​

A snapshot of the Kiwi partners set to shine at the Reseller News Awards
Show Comments