Cisco IOS SNMP Message Processing Denial Of Service Vulnerability ------------------------------------------------------------------ I. Summary Cisco Internetwork Operating System (IOS) 15.0 attempts to process SNMP solicited operations on improper ports (UDP 161,162), which allows remote attackers to cause a denial of service when SNMP is disabled. ------------------------------------------------------------------ II. Description It has been reported that the Cisco Internet Operating System (IOS) is affected by a remote SNMP message processing denial of service vulnerability. This issue may be leveraged to cause a denial of service condition in the affected device. The denial of service is due to the process consumed all available CPU resources in the affected device.The device may have to be reset manually if the attack is successful. ------------------------------------------------------------------ III. Impact Denial of service (process consume all available CPU resources) ------------------------------------------------------------------ IV. Affected Cisco router 2921/K9 IOS 15.0<1r>M6, tested with kubuntu 10.10. Previous versions may also be affected due to code reuse. ------------------------------------------------------------------ V. Solution Currently there are not any vendor-supplied patches for this issue. ------------------------------------------------------------------ VI. Credit The penetration test team Of NCNIPC (China) is credited for this vulnerability.
