Cisco AS5350 Universal Gateway Denial of Service Vulnerability

vendor:

AS5350 Universal Gateway

by:

SecurityFocus

CVSS

MEDIUM

Denial of Service

N/A

CWE

Product Name: AS5350 Universal Gateway

Affected Version From: 12.2(11)T

Affected Version To: 12.2(11)T

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2002

Cisco AS5350 Universal Gateway Denial of Service Vulnerability

The Cisco AS5350 Universal Gateway is reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a vulnerable device. This issue was reported for Cisco AS5350 devices running Cisco IOS release 12.2(11)T. Other firmware and devices may also be affected.

Mitigation:

There are conflicting reports regarding the existence of this vulnerability. One source states that this condition reportedly does not occur if there are no Access Control Lists (ACL) applied on the device and also mentions that this may be related to a known SSH bug. Other sources have indicated that the issue may be related to a configuration problem.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/6059/info

The Cisco AS5350 Universal Gateway is reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a vulnerable device.

This issue was reported for Cisco AS5350 devices running Cisco IOS release 12.2(11)T. Other firmware and devices may also be affected.

There are conflicting reports regarding the existence of this vulnerability. One source states that this condition reportedly does not occur if there are no Access Control Lists (ACL) applied on the device and also mentions that this may be related to a known SSH bug. Other sources have indicated that the issue may be related to a configuration problem. 

nmap -Tinsane -p 1-65535 <target>