Secunia

A vulnerability has been identified in Cisco Content Services Switch 11000 series allowing malicious people to cause a Denial of Service.

The problem is that the Cisco CSS doesn't handle large amounts of TCP SYN requests properly. This causes the device to consume a lot of CPU ressources, which in some cases can cause the device to reboot. This happens because the online diagnostics monitor believes the interface is down and subsequently reboots the system.

The vulnerability has been reported to affect Cisco Content Services Switch 11000 series on CS800 chassis.

Solution
Filter access to the device so that only trusted hosts can establish TCP connections.
Further details available in Customer Area

Provided and/or discovered by
Eduardo Cruz, Emilin Garcia, and Jordi Andre.

Original Advisory
http://www.s21sec.com/en/avisos/s21sec-025-en.txt

Deep Links
Links available in Customer Area