Cisco Catalyst Switches that support CiscoView network management software are vulnerable to a remotely exploitable buffer overflow.

This includes version 5.4 to 7.3 with "cv" in the image name (CiscoView compatibility).

Requesting a long URL causes a buffer overflow which software resets the switch, this can easily be used to cause a Denial of Service, the switch will recover automatically.

The webserver is disabled by default.

Solution
A quick workaround is to filter traffic so that only trusted IP addresses my perform HTTP requests or simply to disable the HTTP server.
Further details available in Customer Area

Deep Links
Links available in Customer Area