CVE-2014-3261

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

CVE-2014-3261

CVE-2014-3261 details a buffer overflow in Cisco NX-OS Smart Call Home, exploitable via crafted SMTP replies to remote SMTP servers. Affected platforms include Cisco UCS NX-OS on Fabric Interconnects, Nexus 3000/4000/5000/7000, and CGOS CG4 (with specific version ranges provided in the Cisco and ...

CVE-2014-2200

CVE-2014-2200 affects Cisco NX-OS 5.0 (before 5.0(5)) on Nexus 7000 devices with local authentication and multiple VDCs enabled. A remote, authenticated user can escalate privileges to an unintended VDC via SSH to a management interface (Bug CSCti11629). The issue is documented in Cisco’s NX-OS a...

CVE-2013-1191

Cisco NX-OS vulnerability (CVE-2013-1191) affects Nexus 7000 devices running 6.1 prior to 6.1(5) with local authentication and multiple VDCs enabled. An authenticated remote user can escalate privileges within an unintended VDC by sending crafted SSH key data during an SSH session to a management...

CVE-2014-2201

Cisco NX-OS MTS on MDS 9000 (before 6.2(7)) and Nexus 7000 (before 6.0(2)) is vulnerable to a remote denial of service via a large volume of crafted traffic, caused by a NULL pointer dereference leading to kernel panic (CVE-2014-2201). Affected devices include NX-OS-based platforms; remediation r...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

Code injection

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

CVE-2014-0684

Cisco NX-OS 6.2(2) on Nexus 7000 switches is affected by CVE-2014-0684. The vulnerability enables a local attacker to trigger a denial-of-service condition by supplying crafted input to the sed command, due to improper input validation (Bug CSCui56136). Impact per sources is local DoS with the po...

Cisco Nexus 7000 Denial of Service Vulnerability

A vulnerability in Cisco Nexus 7000 Series Switches could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an error in input validation for the sed command. An attacker could exploit this vulnerability by passing...

Cisco Nexus 7000 Denial of Service Vulnerability (Cisco-SA-20140506-CVE-2014-0684)

A vulnerability in Cisco Nexus 7000 Series Switches could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2014-0719

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

Hardcoded credentials

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

CVE-2014-0719

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability (Cisco-SA-20140123-CVE-2014-0677)

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. Copyright C 2014 Greenbone Networks GmbH Some text...

CVE-2013-7000

CVE-2013-7000 affects the Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26. The vulnerability allows remote attackers to cause a denial of service by sending a malformed MM4 message over the MM4 connection, impacting availability. Affected component: MMSC in NowSMS. R...

Cisco Nexus 7000 Series Switches Remote Denial of Service Vulnerability

Cisco Nexus 7000 Series switches running on NX-OS are prone to a remote denial-of-service vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability (cisco-sa-20120215-nxos)

Cisco NX-OS Software is affected by a denial of service DoS vulnerability that could cause Cisco Nexus 1000v, 1010, 5000, and 7000 Series Switches, and the Cisco Virtual Security Gateway VSG for Nexus 1000V Series Switches, that are running affected versions of Cisco NX-OS Software to reload when...

CVE-2012-4090

The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089...

Design/Logic Flaw

The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089...