CVE-2015-4232

Cisco NX-OS (Nexus/MDS 9000) devices are affected by CVE-2015-4232 due to insufficient input sanitization of tar parameters in the CLI, allowing a local authenticated user to execute arbitrary OS commands with user privileges. The vulnerability arises from how the tar command parameters are parse...

CVE-2015-4231

The Python interpreter in Cisco NX-OS 6.28a on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416...

CVE-2015-4234

Cisco NX-OS 6.02 and 6.22 on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127...

CVE-2015-4237

The CLI parser in Cisco NX-OS 4.12E11, 6.211b, 6.212, 7.20ZZ99.1, 7.20ZZ99.3, and 9.11SV13.1.8 on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and...

CVE-2015-4231

Cisco NX-OS 6.2(8a) on Nexus 7000 devices is affected by CVE-2015-4231 due to incomplete privilege separation in the Python scripting engine across multiple VDCs. An authenticated local attacker with administrative privileges in one VDC can bypass access restrictions and delete files owned by a d...

CVE-2015-4237

CVE-2015-4237 affects Cisco NX-OS on Nexus switches (NX-OS versions listed in the Cisco/NVD entries). The vulnerability is in the CLI parser where improper validation of special characters in filenames allows an authenticated, local attacker to run arbitrary OS commands, enabling local privilege ...

CVE-2015-4234

Cisco NX-OS on Nexus devices (6.0(2) and 6.2(2)) is affected by a local privilege-escalation flaw in the Python scripting subsystem, allowing a locally authenticated user to obtain root via improper OS configuration and input to the Python interpreter. Exploitation requires local access and authe...

Cisco Nexus OS Device Command Line Interface Local Elevation of Privilege Vulnerability

Nexus is Cisco's line of network switches designed for data centers. A security vulnerability in the CLI parser of the Cisco Nexus Operating System NX-OS allows an authenticated, local attacker to gain elevated privileges by exploiting this vulnerability...

Cisco Nexus 7000 Device Local Elevation of Privilege Vulnerability

The Cisco Nexus 7000 Series switches help create the network infrastructure platform needed for next-generation unified array data centers. Multiple elevation of privilege vulnerabilities exist in the Python scripting subsystem on Cisco Nexus 7000 devices configured with multiple VDCs, which can ...

Cisco Nexus Device Python Subsystem Local Elevation of Privilege Vulnerability

Nexus is Cisco's line of network switches designed for data centers. An elevation of privilege vulnerability exists in the Python subsystem of Cisco Nexus devices, which can be exploited by an authenticated, local attacker to gain elevated privileges...

Cisco Nexus Device NS-OS Software Command Line Interpreter Local Elevation of Privilege Vulnerability

Nexus is Cisco's line of network switches designed for data centers. Multiple elevation of privilege vulnerabilities exist in the command line interpreter of Cisco Nexus devices with invalid parameter input filtering for the tar command, which can be exploited by an authenticated, local attacker ...

Cisco Nexus Operating System Devices Command Line Interface Local Privilege Escalation Vulnerability

A vulnerability in the Command Line Interface CLI parser of Cisco Nexus Operating System NX-OS devices could allow an authenticated, local attacker to perform a privilege escalation. The vulnerability is due to improper input validation of special characters within filenames. An attacker could...

Cisco Nexus Devices Python Subsystem Local Privilege Escalation Vulnerabilities

Multiple privilege escalation vulnerabilities in the Python subsystem of Cisco Nexus devices running Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges. The vulnerabilities are due to insufficient hardening of the operating system on which NX-OS is...

Cisco Nexus 7000 Devices Virtual Device Context Privilege Escalation Vulnerability

A privilege escalation vulnerability in the Python scripting subsystem of Cisco Nexus 7000 devices that have been configured with multiple virtual device contexts VDCs could allow an authenticated, local attacker to delete files owned by a different VDC on the device. The vulnerability exists due...

Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. The vulnerability exists due to insufficient input sanitization of...

Cisco Nexus 9000 Application Policy Infrastructure Controller Unauthorized Access Vulnerability

The Cisco Application Policy Infrastructure Controller APIC on Nexus 9000 devices is a Cisco controller that runs on 9000 series switch devices to automate the management of application-centric infrastructure ACI. It supports access to all ACI information, optimizing the application lifecycle,...

CVE-2015-4225

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

Design/Logic Flaw

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

CVE-2015-4225

Cisco APIC on Nexus 9000 devices (versions 1.0(1.110a) and 1.0(1e)) contains a vulnerability where RBAC health scoring is not properly implemented, allowing remote authenticated users to read sensitive information via unspecified vectors (Bug CSCuq77485). The issue stems from RBAC protection arou...

CVE-2015-4225

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...