Title: Cisco Multiple Products Network Analysis Module SNMP Communication Spoofing Vulnerability
Severity: CRITICAL
Description:
Cisco NAMs (Network Analysis Module) are deployed in Catalyst 6000 and 6500 as well as Cisco 7600 series routers to monitor and analyze network traffic by using Remote Monitoring (RMON), RMON2, and other MIBs.
Multiple Cisco routers that have a NAM (Network Analysis Module) installed are prone to an SNMP communication-spoofing vulnerability.
Communication between the router operating system and a NAM is accomplished via SNMP. An attacker can spoof this communication to manipulate and gain complete control of affected devices.
Specific details regarding this issue are currently unavailable. This BID will be updated when new information is made available.
Successful exploits will result in the complete compromise of affected devices.
This issue affects devices running Cisco IOS as well as Cisco CatOS.
Cisco Catalyst 6000 and 6500 as well as Cisco 7600 series devices that have a Network Analysis Module installed are affected.
Affected Products:
- Cisco 7600 0.0.0
- Cisco CatOS 7.6(15)
- Cisco CatOS 7.6(16)
- Cisco CatOS 7.6(17)
- Cisco CatOS 7.6(18)
- Cisco CatOS 7.6(19)
- Cisco CatOS 8.5(1)
- Cisco CatOS 8.5(2)
- Cisco CatOS 8.5(3)
- Cisco CatOS 8.5(4)
- Cisco CatOS 8.5(5)
- Cisco Catalyst 6000
- Cisco Catalyst 6500 0.0.0
- Cisco IOS 12.1E
- Cisco IOS 12.1EX
- Cisco IOS 12.2 ZU
- Cisco IOS 12.2EU
- Cisco IOS 12.2EW
- Cisco IOS 12.2EWA
- Cisco IOS 12.2IXA
- Cisco IOS 12.2IXB
- Cisco IOS 12.2S
- Cisco IOS 12.2SG
- Cisco IOS 12.2SGA
- Cisco IOS 12.2SGB
- Cisco IOS 12.2SX
- Cisco IOS 12.2SXA
- Cisco IOS 12.2SXB
- Cisco IOS 12.2SXD
- Cisco IOS 12.2SXE
- Cisco IOS 12.2SXF
- Cisco IOS 12.2SY
- Cisco IOS 12.2ZA
References:
- Cisco: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Mod
- Cisco: Network Analysis Modules
- US-CERT: Vulnerability Note VU#472412 Cisco Catalyst Systems with a NAM may allow system
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
