The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nx-os | Cisco | 5.1.3 (including) | 5.1.3 (including) |
| Nx-os | Cisco | 5.3.0 (including) | 5.3.0 (including) |