Lucene search

[email protected]CVE-2015-0658

HistoryMar 28, 2015 - 1:59 a.m.

CVE-2015-0658

2015-03-2801:59:49

CWE-20

[email protected]

web.nvd.nist.gov

cisco

nx-os

dhcp

cve-2015-0658

remote attack

arbitrary commands

7.9 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.4%

JSON

The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.

Affected configurations

NVD

Node

cisconx-osMatch6.1\(2\)

cisconx-osMatch6.1\(3\)

cisconx-osMatch6.1\(4\)

cisconx-osMatch6.1\(4a\)

cisconx-osMatch6.2\(2\)

cisconx-osMatch6.2\(2a\)

cisconx-osMatch6.2\(6\)

cisconx-osMatch6.2\(6b\)

cisconx-osMatch6.2\(8\)

cisconx-osMatch6.2\(8a\)

cisconx-osMatch6.2\(8b\)

AND

cisconexus_7000

cisconexus_7700

Node

cisconx-osMatch6.0\(2\)n1\(1\)

cisconx-osMatch6.0\(2\)n1\(2\)

cisconx-osMatch6.0\(2\)n1\(2a\)

cisconx-osMatch6.0\(2\)n2\(1\)

cisconx-osMatch6.0\(2\)n2\(1b\)

cisconx-osMatch6.0\(2\)n2\(2\)

cisconx-osMatch6.0\(2\)n2\(3\)

cisconx-osMatch6.0\(2\)n2\(4\)

cisconx-osMatch6.0\(2\)n2\(5\)

cisconx-osMatch7.0\(0\)n1\(1\)

cisconx-osMatch7.0\(1\)n1\(1\)

cisconx-osMatch7.0\(2\)n1\(1\)

cisconx-osMatch7.0\(3\)n1\(1\)

AND

cisconexus_5010

cisconexus_5020

cisconexus_5548p

cisconexus_5548up

cisconexus_5596t

cisconexus_5596up

cisconexus_56128p

cisconexus_5624q

cisconexus_5648q

cisconexus_5672up

cisconexus_5696q

Node

cisconx-osMatch6.0\(2\)n1\(2\)

cisconx-osMatch6.0\(2\)n1\(2a\)

cisconx-osMatch6.0\(2\)n2\(1\)

cisconx-osMatch6.0\(2\)n2\(1b\)

cisconx-osMatch6.0\(2\)n2\(2\)

cisconx-osMatch6.0\(2\)n2\(3\)

cisconx-osMatch6.0\(2\)n2\(4\)

cisconx-osMatch6.0\(2\)n2\(5\)

cisconx-osMatch7.0\(0\)n1\(1\)

cisconx-osMatch7.0\(1\)n1\(1\)

cisconx-osMatch7.0\(2\)n1\(1\)

cisconx-osMatch7.0\(3\)n1\(1\)

AND

cisconexus_6001

cisconexus_6004

Node

cisconx-osMatch6.1\(2\)i2\(1\)

cisconx-osMatch6.1\(2\)i2\(2\)

cisconx-osMatch6.1\(2\)i2\(2a\)

cisconx-osMatch6.1\(2\)i2\(2b\)

cisconx-osMatch6.1\(2\)i2\(3\)

cisconx-osMatch6.1\(2\)i3\(1\)

cisconx-osMatch6.1\(2\)i3\(2\)

cisconx-osMatch6.1\(2\)i3\(3\)

cisconx-osMatch11.0\(1b\)

cisconx-osMatch11.0\(1c\)

AND

cisconexus_93120tx

cisconexus_93128tx

cisconexus_9332pq

cisconexus_9336pq_aci_spine

cisconexus_9372px

cisconexus_9372tx

cisconexus_9396px

cisconexus_9396tx

cisconexus_9504

cisconexus_9508

cisconexus_9516

Node

cisconx-osMatch5.0\(3\)u3\(1\)

cisconx-osMatch5.0\(3\)u3\(2\)

cisconx-osMatch5.0\(3\)u3\(2a\)

cisconx-osMatch5.0\(3\)u3\(2b\)

cisconx-osMatch5.0\(3\)u4\(1\)

cisconx-osMatch5.0\(3\)u5\(1\)

cisconx-osMatch5.0\(3\)u5\(1a\)

cisconx-osMatch5.0\(3\)u5\(1b\)

cisconx-osMatch5.0\(3\)u5\(1c\)

cisconx-osMatch5.0\(3\)u5\(1d\)

cisconx-osMatch5.0\(3\)u5\(1e\)

cisconx-osMatch5.0\(3\)u5\(1f\)

cisconx-osMatch5.0\(3\)u5\(1g\)

cisconx-osMatch5.0\(3\)u5\(1h\)

cisconx-osMatch6.0\(2\)u1\(1\)

cisconx-osMatch6.0\(2\)u1\(1a\)

cisconx-osMatch6.0\(2\)u1\(2\)

cisconx-osMatch6.0\(2\)u1\(3\)

cisconx-osMatch6.0\(2\)u1\(4\)

cisconx-osMatch6.0\(2\)u2\(1\)

cisconx-osMatch6.0\(2\)u2\(2\)

cisconx-osMatch6.0\(2\)u2\(3\)

cisconx-osMatch6.0\(2\)u2\(4\)

cisconx-osMatch6.0\(2\)u2\(5\)

cisconx-osMatch6.0\(2\)u2\(6\)

cisconx-osMatch6.0\(2\)u3\(1\)

cisconx-osMatch6.0\(2\)u3\(2\)

cisconx-osMatch6.0\(2\)u3\(3\)

cisconx-osMatch6.0\(2\)u3\(4\)

cisconx-osMatch6.0\(2\)u3\(5\)

cisconx-osMatch6.0\(2\)u4\(1\)

cisconx-osMatch6.0\(2\)u4\(2\)

cisconx-osMatch6.0\(2\)u4\(3\)

cisconx-osMatch6.0\(2\)u5\(1\)

AND

cisconexus_3016

cisconexus_3048

cisconexus_3064

cisconexus_3132q

cisconexus_3164qMatch-

cisconexus_3172

cisconexus_3524

cisconexus_3548

CPENameOperatorVersion
cisco:nx-oscisco nx-oseq6.1\(2\)
cisco:nx-oscisco nx-oseq6.1\(3\)
cisco:nx-oscisco nx-oseq6.1\(4\)
cisco:nx-oscisco nx-oseq6.1\(4a\)
cisco:nx-oscisco nx-oseq6.2\(2\)
cisco:nx-oscisco nx-oseq6.2\(2a\)
cisco:nx-oscisco nx-oseq6.2\(6\)
cisco:nx-oscisco nx-oseq6.2\(6b\)
cisco:nx-oscisco nx-oseq6.2\(8\)
cisco:nx-oscisco nx-oseq6.2\(8a\)

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	eq	6.1\(2\)
cisco:nx-os	cisco nx-os	eq	6.1\(3\)
cisco:nx-os	cisco nx-os	eq	6.1\(4\)
cisco:nx-os	cisco nx-os	eq	6.1\(4a\)
cisco:nx-os	cisco nx-os	eq	6.2\(2\)
cisco:nx-os	cisco nx-os	eq	6.2\(2a\)
cisco:nx-os	cisco nx-os	eq	6.2\(6\)
cisco:nx-os	cisco nx-os	eq	6.2\(6b\)
cisco:nx-os	cisco nx-os	eq	6.2\(8\)
cisco:nx-os	cisco nx-os	eq	6.2\(8a\)