5 matches found
Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation (CVE-2015-4232)
Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
CVE-2018-0092
A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly delete valid user accounts. The network-operator role should not be able to delete other configured users on the device. The vulnerability is...
Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability (Cisco-SA-20150630-CVE-2015-4232)
A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. Copyright C 2016 Greenbone Networks GmbH Some text descriptions mig...
CVE-2016-1329
Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...
Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability
A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. The vulnerability exists due to insufficient input sanitization of...