The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0 ("No Error"), which allows remote attackers to cause a denial of service (inaccessible domain) by forcing other DNS servers to send and cache a request for a AAAA record to the vulnerable server.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00534
Percentile: 0.66398

CVSS Scoring

Affected Products

• cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*
• cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*

← Back to Home