Cisco IOS SNMP Message Processing Denial Of Service Vulnerability

Cisco IOS SNMP Message Processing Denial Of Service Vulnerability

I. Summary

Cisco Internetwork Operating System (IOS) 15.0 attempts to process SNMP solicited operations
on improper ports (UDP 161,162), which allows remote attackers to cause a denial of service
when SNMP is disabled.

II. Description

It has been reported that the Cisco Internet Operating System (IOS) is affected by a remote
SNMP message processing denial of service vulnerability. This issue may be leveraged to cause a
denial of service condition in the affected device. The denial of service is due to the process
consumed all available CPU resources in the affected device.The device may have to be reset
manually if the attack is successful.

III. Impact

Denial of service (process consume all available CPU resources)

IV. Affected

Cisco router 2921/K9 IOS 15.0<1r>M6, tested with kubuntu 10.10. Previous versions may also be
affected due to code reuse.

V. Solution

Currently there are not any vendor-supplied patches for this issue.

VI. Credit

The penetration test team Of NCNIPC (China) is credited for this vulnerability.