vendor:
Cisco routers
by:
Martin Kluge
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Cisco routers
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: FreeBSD, Linux
Unknown
nhrp-dos
The nhrp-dos exploit allows an attacker to cause a denial of service by sending malicious packets to a Cisco router that is using the Next-Hop-Resolution Protocol (NHRP). This vulnerability is identified by the Cisco bug ID CSCin95836. NHRP is a protocol used by a source host/router to determine the next hop towards the destination in a Non-Broadcast-Multi-Access (NBMA) subnetwork. The exploit targets the NHRP functionality of Cisco routers and can disrupt network connectivity.
Mitigation:
Apply the relevant patch or upgrade the Cisco router firmware to a version that addresses the vulnerability. Alternatively, disable the NHRP functionality if it is not required.