CVE-2018-0291

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol...

CVE-2018-0292

A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...

CVE-2018-0312

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software...

CVE-2018-0292

A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...

CVE-2018-0307

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting...

CVE-2018-0295

A vulnerability in the Border Gateway Protocol BGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update...

CVE-2018-0330

The CVE-2018-0330 issue concerns the NX-API management API in Cisco NX-OS Software. Affected devices include Cisco MDS 9000, Nexus 2000/3000/3500/5500/5600/6000/7000/7700 series, and NX-OS in standalone mode. Root cause: improper validation of parameters within NX-API requests, enabling an authen...

CVE-2018-0293

A vulnerability in role-based access control RBAC for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user. The attacker would have to possess valid user credentials for the device. The vulnerability is d...

CVE-2018-0312

The CVE-2018-0312 issue affects Cisco FXOS and Cisco NX-OS Software with Cisco Fabric Services. Vulnerability arises from insufficient validation of Cisco Fabric Services packet headers when processing data, leading to a buffer overflow that could allow an unauthenticated, remote attacker to exec...

CVE-2018-0314

A vulnerability in the Cisco Fabric Services CFS component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability exists because the affected software insufficiently validates Cisco Fabric...

CVE-2018-0301

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

CVE-2018-0304

The CVE-2018-0304 issue affects Cisco FXOS/NX-OS Fabric Services. A vulnerability arises from insufficient validation of Cisco Fabric Services packet headers, enabling an unauthenticated, remote attacker to read memory, cause DoS, or execute arbitrary code as root by sending crafted Fabric Servic...

CVE-2018-0308

CVE-2018-0308 affects Cisco FXOS/NX-OS Fabric Services. The root cause is insufficient validation of headers in Cisco Fabric Services packets, leading to a buffer overflow that could allow an unauthenticated, remote attacker to execute arbitrary code or cause a DoS. Affected products include Fire...

CVE-2018-0292

CVE-2018-0292 – Cisco NX-OS IGMP Snooping RCE/DoS : A buffer overflow in the IGMP Snooping subsystem of Cisco NX-OS Software could be exploited by an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system, or cause a reload (DoS). Affected are Nex...

CVE-2018-0102

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability exists because the affected software attempts to free the same area of memory twice...

Race condition

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability exists because the affected software attempts to free the same area of memory twice...

CVE-2018-0102

The CVE-2018-0102 issue affects Cisco NX-OS Pong tool on Nexus 7000/7700 series when Pong and FabricPath are enabled and a SPAN session monitors the FabricPath port. The vulnerability stems from the software freeing the same memory area twice, enabling an unauthenticated, adjacent attacker to tri...

Design/Logic Flaw

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient sanitization of...

CVE-2017-12301

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient sanitization of...

CVE-2017-12301

CVE-2017-12301 describes a vulnerability in the Python scripting subsystem of Cisco NX-OS Software. An authenticated, local attacker can escape the Python parser’s sandbox by exploiting insufficient sanitization of user-provided parameters passed to Python functions, potentially executing arbitra...