vendor:
IOS
by:
SecurityFocus
7.5
CVSS
HIGH
Memory Disclosure
200
CWE
Product Name: IOS
Affected Version From: IOS 11.2
Affected Version To: IOS 12.2
Patch Exists: YES
Related CWE: CVE-2002-0647
CPE: o:cisco:ios
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2002
Cisco IOS Malformed UDP Echo Packet Memory Disclosure Vulnerability
It has been reported that under some circumstances, a Cisco appliance running IOS may answer malicious malformed UDP echo packets with replies that contain partial contents from the affected router's memory.
Mitigation:
Administrators should ensure that their systems are running the latest version of IOS. Additionally, administrators should consider disabling the echo service on their systems.
