SNMP: Cisco SNMP Message Denial of Service

This signature detects attempts to exploit a known vulnerability in Cisco devices. A successful attack can result in a denial-of-service condition.

Extended Description

Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 (Bugtraq IDs 4088 and 4089), however more information is now available and a separate Bugtraq ID has been allocated for the Cisco Operating Systems and Appliances vulnerabilities. It is reportedly possible for a remote attacker to create a denial of service condition by transmitting a malformed SNMP request to a vulnerable Cisco Operating System or Appliance. The affected device may reset, or require a manual reset to regain functionality.

Affected Products

Cisco mgx-8260,Cisco call_manager

Short Name
SNMP:DOS:CISCO-DOS
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
SNMP
Keywords
CA-2002-03 CVE-2002-0012 Cisco Denial Message SNMP Service bid:4132 of
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3339
Port
UDP/64123,49153
False Positive
Unknown
Vendors

Cisco

CVSS Score

10.0

Found a potential security threat?