Lucene search
HistoryOct 06, 2016 - 10:59 a.m.
CVE-2015-0721
cve-2015-0721
cisco
nx-os
multilayer director
nexus
ssh
cli access
bug ids
cscum35502
cscuw78669
cscuw79754
cscux88492
nvd
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.4%
Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.
Affected configurations
Node
cisconx-osMatch4.1.\(2\)
ORcisconx-osMatch4.1.\(3\)
ORcisconx-osMatch4.1.\(4\)
ORcisconx-osMatch4.1.\(5\)
ORcisconx-osMatch4.2\(3\)
ORcisconx-osMatch4.2\(4\)
ORcisconx-osMatch4.2\(6\)
ORcisconx-osMatch4.2\(8\)
ORcisconx-osMatch4.2.\(2a\)
ORcisconx-osMatch5.0\(2a\)
ORcisconx-osMatch5.0\(3\)
ORcisconx-osMatch5.0\(5\)
ORcisconx-osMatch5.1\(1\)
ORcisconx-osMatch5.1\(1a\)
ORcisconx-osMatch5.1\(3\)
ORcisconx-osMatch5.1\(4\)
ORcisconx-osMatch5.1\(5\)
ORcisconx-osMatch5.1\(6\)
ORcisconx-osMatch5.2\(1\)
ORcisconx-osMatch5.2\(3a\)
ORcisconx-osMatch5.2\(4\)
ORcisconx-osMatch5.2\(5\)
ORcisconx-osMatch5.2\(7\)
ORcisconx-osMatch5.2\(9\)
ORcisconx-osMatch6.0\(1\)
ORcisconx-osMatch6.0\(2\)
ORcisconx-osMatch6.0\(3\)
ORcisconx-osMatch6.0\(4\)
ORcisconx-osMatch6.1\(1\)
ORcisconx-osMatch6.1\(2\)
ORcisconx-osMatch6.1\(3\)
ORcisconx-osMatch6.1\(4\)
ORcisconx-osMatch6.1\(4a\)
ORcisconx-osMatch6.2\(2\)
ORcisconx-osMatch6.2\(2a\)
ORcisconx-osMatch6.2\(6\)
ORcisconx-osMatch6.2\(6b\)
ORcisconx-osMatch6.2\(8\)
ORcisconx-osMatch6.2\(8a\)
ORcisconx-osMatch6.2\(8b\)
ORcisconx-osMatch6.2\(10\)
ORcisconx-osMatchbase
cisconexus_7000_10-slotMatch-
ORcisconexus_7000_18-slotMatch-
ORcisconexus_7000_4-slotMatch-
ORcisconexus_7000_9-slotMatch-
ORcisconexus_7700_10-slotMatch-
ORcisconexus_7700_18-slotMatch-
ORcisconexus_7700_2-slotMatch-
ORcisconexus_7700_6-slotMatch-
Node
cisconx-osMatch4.1\(2\)e1\(1\)
ORcisconx-osMatch4.1\(2\)e1\(1b\)
ORcisconx-osMatch4.1\(2\)e1\(1d\)
ORcisconx-osMatch4.1\(2\)e1\(1e\)
ORcisconx-osMatch4.1\(2\)e1\(1f\)
ORcisconx-osMatch4.1\(2\)e1\(1g\)
ORcisconx-osMatch4.1\(2\)e1\(1h\)
ORcisconx-osMatch4.1\(2\)e1\(1i\)
ORcisconx-osMatch4.1\(2\)e1\(1j\)
ORcisconx-osMatchbase
cisconexus_4001iMatch-
Node
cisconx-osMatch4.0\(0\)n1\(1a\)
ORcisconx-osMatch4.0\(0\)n1\(2\)
ORcisconx-osMatch4.0\(0\)n1\(2a\)
ORcisconx-osMatch4.0\(1a\)n1\(1\)
ORcisconx-osMatch4.0\(1a\)n1\(1a\)
ORcisconx-osMatch4.0\(1a\)n2\(1\)
ORcisconx-osMatch4.0\(1a\)n2\(1a\)
ORcisconx-osMatch4.1\(3\)n1\(1\)
ORcisconx-osMatch4.1\(3\)n1\(1a\)
ORcisconx-osMatch4.1\(3\)n2\(1\)
ORcisconx-osMatch4.1\(3\)n2\(1a\)
ORcisconx-osMatch4.2\(1\)n1\(1\)
ORcisconx-osMatch4.2\(1\)n2\(1\)
ORcisconx-osMatch4.2\(1\)n2\(1a\)
ORcisconx-osMatch5.0\(2\)n1\(1\)
ORcisconx-osMatch5.0\(2\)n2\(1\)
ORcisconx-osMatch5.0\(2\)n2\(1a\)
ORcisconx-osMatch5.0\(3\)n1\(1c\)
ORcisconx-osMatch5.0\(3\)n2\(1\)
ORcisconx-osMatch5.0\(3\)n2\(2\)
ORcisconx-osMatch5.0\(3\)n2\(2a\)
ORcisconx-osMatch5.0\(3\)n2\(2b\)
ORcisconx-osMatch5.1\(3\)n1\(1\)
ORcisconx-osMatch5.1\(3\)n1\(1a\)
ORcisconx-osMatch5.1\(3\)n2\(1\)
ORcisconx-osMatch5.1\(3\)n2\(1a\)
ORcisconx-osMatch5.1\(3\)n2\(1b\)
ORcisconx-osMatch5.1\(3\)n2\(1c\)
ORcisconx-osMatch5.2\(1\)n1\(1\)
ORcisconx-osMatch5.2\(1\)n1\(1a\)
ORcisconx-osMatch5.2\(1\)n1\(1b\)
ORcisconx-osMatch5.2\(1\)n1\(2\)
ORcisconx-osMatch5.2\(1\)n1\(2a\)
ORcisconx-osMatch5.2\(1\)n1\(3\)
ORcisconx-osMatch5.2\(1\)n1\(4\)
ORcisconx-osMatch5.2\(1\)n1\(5\)
ORcisconx-osMatch5.2\(1\)n1\(6\)
ORcisconx-osMatch5.2\(1\)n1\(7\)
ORcisconx-osMatch5.2\(1\)n1\(8\)
ORcisconx-osMatch5.2\(1\)n1\(8a\)
ORcisconx-osMatch6.0\(2\)n1\(1\)
ORcisconx-osMatch6.0\(2\)n1\(2\)
ORcisconx-osMatch6.0\(2\)n1\(2a\)
ORcisconx-osMatch6.0\(2\)n2\(1\)
ORcisconx-osMatch6.0\(2\)n2\(1b\)
ORcisconx-osMatch6.0\(2\)n2\(2\)
ORcisconx-osMatch6.0\(2\)n2\(4\)
ORcisconx-osMatch6.0\(2\)n2\(5\)
ORcisconx-osMatch7.0\(0\)n1\(1\)
ORcisconx-osMatch7.0\(1\)n1\(1\)
ORcisconx-osMatch7.0\(2\)n1\(1\)
ORcisconx-osMatch7.0\(3\)n1\(1\)
ORcisconx-osMatchbase
cisconexus_5010Match-
ORcisconexus_5020Match-
ORcisconexus_5548pMatch-
ORcisconexus_5548upMatch-
ORcisconexus_5596tMatch-
ORcisconexus_5596upMatch-
ORcisconexus_56128pMatch-
ORcisconexus_5624qMatch-
ORcisconexus_5648qMatch-
ORcisconexus_5672upMatch-
ORcisconexus_5672up-16gMatch-
ORcisconexus_5696qMatch-
Node
cisconx-osMatch6.0\(2\)n1\(2\)
ORcisconx-osMatch6.0\(2\)n1\(2a\)
ORcisconx-osMatch6.0\(2\)n2\(1\)
ORcisconx-osMatch6.0\(2\)n2\(1b\)
ORcisconx-osMatch6.0\(2\)n2\(2\)
ORcisconx-osMatch6.0\(2\)n2\(3\)
ORcisconx-osMatch6.0\(2\)n2\(4\)
ORcisconx-osMatch6.0\(2\)n2\(5\)
ORcisconx-osMatch7.0\(0\)n1\(1\)
ORcisconx-osMatch7.0\(1\)n1\(1\)
ORcisconx-osMatch7.0\(2\)n1\(1\)
ORcisconx-osMatch7.0\(3\)n1\(1\)
ORcisconx-osMatchbase
cisconexus_6001Match-
ORcisconexus_6004Match-
Node
cisconx-osMatch4.0\(4\)sv1\(1\)
ORcisconx-osMatch4.0\(4\)sv1\(2\)
ORcisconx-osMatch4.0\(4\)sv1\(3\)
ORcisconx-osMatch4.0\(4\)sv1\(3a\)
ORcisconx-osMatch4.0\(4\)sv1\(3b\)
ORcisconx-osMatch4.0\(4\)sv1\(3c\)
ORcisconx-osMatch4.0\(4\)sv1\(3d\)
ORcisconx-osMatch4.2\(1\)sv1\(4\)
ORcisconx-osMatch4.2\(1\)sv1\(4a\)
ORcisconx-osMatch4.2\(1\)sv1\(4b\)
ORcisconx-osMatch4.2\(1\)sv1\(5.1\)
ORcisconx-osMatch4.2\(1\)sv1\(5.1a\)
ORcisconx-osMatch4.2\(1\)sv1\(5.2\)
ORcisconx-osMatch4.2\(1\)sv1\(5.2b\)
ORcisconx-osMatch4.2\(1\)sv2\(1.1\)
ORcisconx-osMatch4.2\(1\)sv2\(1.1a\)
ORcisconx-osMatch4.2\(1\)sv2\(2.1\)
ORcisconx-osMatch4.2\(1\)sv2\(2.1a\)
ORcisconx-osMatch5.2\(1\)sm1\(5.1\)
ORcisconx-osMatchbase
cisconexus_1000v_for_microsoft_hyper-vMatch-
ORcisconexus_1000v_for_vmware_vsphereMatch-
Node
cisconx-osMatch5.0\(3\)u1\(1\)
ORcisconx-osMatch5.0\(3\)u1\(1a\)
ORcisconx-osMatch5.0\(3\)u1\(1b\)
ORcisconx-osMatch5.0\(3\)u1\(1d\)
ORcisconx-osMatch5.0\(3\)u1\(2\)
ORcisconx-osMatch5.0\(3\)u1\(2a\)
ORcisconx-osMatch5.0\(3\)u2\(1\)
ORcisconx-osMatch5.0\(3\)u2\(2\)
ORcisconx-osMatch5.0\(3\)u2\(2a\)
ORcisconx-osMatch5.0\(3\)u2\(2b\)
ORcisconx-osMatch5.0\(3\)u2\(2c\)
ORcisconx-osMatch5.0\(3\)u2\(2d\)
ORcisconx-osMatch5.0\(3\)u3\(1\)
ORcisconx-osMatch5.0\(3\)u3\(2\)
ORcisconx-osMatch5.0\(3\)u3\(2a\)
ORcisconx-osMatch5.0\(3\)u3\(2b\)
ORcisconx-osMatch5.0\(3\)u4\(1\)
ORcisconx-osMatch5.0\(3\)u5\(1\)
ORcisconx-osMatch5.0\(3\)u5\(1a\)
ORcisconx-osMatch5.0\(3\)u5\(1b\)
ORcisconx-osMatch5.0\(3\)u5\(1c\)
ORcisconx-osMatch5.0\(3\)u5\(1e\)
ORcisconx-osMatch5.0\(3\)u5\(1f\)
ORcisconx-osMatch5.0\(3\)u5\(1g\)
ORcisconx-osMatch5.0\(3\)u5\(1h\)
ORcisconx-osMatch6.0\(2\)u1\(1\)
ORcisconx-osMatch6.0\(2\)u1\(1a\)
ORcisconx-osMatch6.0\(2\)u1\(2\)
ORcisconx-osMatch6.0\(2\)u1\(3\)
ORcisconx-osMatch6.0\(2\)u1\(4\)
ORcisconx-osMatch6.0\(2\)u2\(1\)
ORcisconx-osMatch6.0\(2\)u2\(2\)
ORcisconx-osMatch6.0\(2\)u2\(3\)
ORcisconx-osMatch6.0\(2\)u2\(4\)
ORcisconx-osMatch6.0\(2\)u2\(5\)
ORcisconx-osMatch6.0\(2\)u2\(6\)
ORcisconx-osMatch6.0\(2\)u3\(1\)
ORcisconx-osMatch6.0\(2\)u3\(2\)
ORcisconx-osMatch6.0\(2\)u3\(3\)
ORcisconx-osMatch6.0\(2\)u3\(4\)
ORcisconx-osMatch6.0\(2\)u3\(5\)
ORcisconx-osMatch6.0\(2\)u4\(1\)
ORcisconx-osMatch6.0\(2\)u4\(2\)
ORcisconx-osMatch6.0\(2\)u4\(3\)
ORcisconx-osMatch6.0\(2\)u5\(1\)
ORcisconx-osMatchbase
cisconexus_3016Match-
ORcisconexus_3048Match-
ORcisconexus_31108pc-vMatch-
ORcisconexus_31108tc-vMatch-
ORcisconexus_31128pqMatch-
ORcisconexus_3132qMatch-
ORcisconexus_3132q-vMatch-
ORcisconexus_3164qMatch-
ORcisconexus_3172Match-
ORcisconexus_3232cMatch-
ORcisconexus_3264qMatch-
ORcisconexus_3524Match-
ORcisconexus_3548Match-
Node
cisconx-osMatch6.1\(2\)i2\(1\)
ORcisconx-osMatch6.1\(2\)i2\(2\)
ORcisconx-osMatch6.1\(2\)i2\(2a\)
ORcisconx-osMatch6.1\(2\)i2\(2b\)
ORcisconx-osMatch6.1\(2\)i2\(3\)
ORcisconx-osMatch6.1\(2\)i3\(1\)
ORcisconx-osMatch6.1\(2\)i3\(2\)
ORcisconx-osMatch6.1\(2\)i3\(3\)
ORcisconx-osMatch11.0\(1b\)
ORcisconx-osMatch11.0\(1c\)
ORcisconx-osMatchbase
cisconexus_92160yc-xMatch-
ORcisconexus_92304qcMatch-
ORcisconexus_9236cMatch-
ORcisconexus_9272qMatch-
ORcisconexus_93108tc-exMatch-
ORcisconexus_93120txMatch-
ORcisconexus_93128txMatch-
ORcisconexus_93180yc-exMatch-
ORcisconexus_9332pqMatch-
ORcisconexus_9336pq_aci_spineMatch-
ORcisconexus_9372pxMatch-
ORcisconexus_9372txMatch-
ORcisconexus_9396pxMatch-
ORcisconexus_9396txMatch-
ORcisconexus_9504Match-
ORcisconexus_9508Match-
ORcisconexus_9516Match-
Related
openvas
openvas
nessus
nessus
prion
prion
Code injection
2016-10-06 10:59:00
nvd
nvd
CVE-2015-0721
2016-10-06 10:59:00
cisco
cisco
cvelist
cvelist
CVE-2015-0721
2016-10-06 10:00:00
threatpost
threatpost
Cisco Warns of Critical Flaws in Nexus Switches
2016-10-07 10:55:27
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.4%
Related for CVE-2015-0721