Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected device. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco NX-OS OpenSSL Multiple Vulnerabilities

The remote Cisco device is running a version of NX-OS software that is affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Note this iss...

CVE-2016-1341

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...

CVE-2016-1341

CVE-2016-1341 affects Cisco NX-OS on Nexus 2000 Series Fabric Extender devices. A blank root password allows local users to gain root privileges via unspecified vectors (Bug CSCur22079). Affected software versions include NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1). The vulnerability is local...

CVE-2016-1341

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...

Cisco NX-OS Application Policy Infrastructure Controller Access Control Vulnerability (cisco-sa-20160203-apic)

A vulnerability in the role-based access control RBAC of the Cisco Application Policy Infrastructure Controller APIC could allow an authenticated remote user to make configuration changes outside of their configured access privileges. Copyright C 2016 Greenbone Networks GmbH Some text description...

CVE-2015-6394

The kernel in Cisco NX-OS 5.29N11 on Nexus 5000 devices allows local users to cause a denial of service device crash via crafted USB parameters, aka Bug ID CSCus89408...

Design/Logic Flaw

The kernel in Cisco NX-OS 5.29N11 on Nexus 5000 devices allows local users to cause a denial of service device crash via crafted USB parameters, aka Bug ID CSCus89408...

CVE-2015-6394

CVE-2015-6394 affects Cisco NX-OS on Nexus 5000 series with kernel DoS vulnerability exposed by USB driver parameters. Specifically, Cisco NX-OS 5.2(9)N1(1) is vulnerable to a local attacker who can crash the device by sending crafted USB parameters, per Bug CSCus89408. The issue is a local, kern...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions by establishing connections with Java applications...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted ARP packet...

The vulnerability of the NX-OS network operating system allows a hacker to execute arbitrary operating system commands.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary commands on the operating system by sending specific parameters...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor, operating locally, to cause service interruptions due to errors in the session termination process...

CVE-2015-6308

Cisco NX-OS 6.02U60.46 on N3K devices allows remote authenticated users to cause a denial of service temporary SNMP outage via an SNMP request for an OID that does not exist, aka Bug ID CSCuw36684...

Command injection

Cisco NX-OS 6.02U60.46 on N3K devices allows remote authenticated users to cause a denial of service temporary SNMP outage via an SNMP request for an OID that does not exist, aka Bug ID CSCuw36684...

CVE-2015-6308

Cisco NX-OS 6.0(2)U6(0.46) on Cisco Nexus 3000 (N3K) devices is affected by CVE-2015-6308. The issue arises in the SNMP interface: remote authenticated users can trigger a denial of service (temporary SNMP outage) by sending an SNMP request for a non-existent OID. Impact is described as a partial...

CVE-2015-6295

Cisco NX-OS 6.12I34 and 7.03I11 on Nexus 9000 N9K devices allows remote attackers to cause a denial of service CPU consumption or control-plane instability or trigger unintended traffic forwarding via a Layer 2 packet with a reserved VLAN number, aka Bug ID CSCuw13560...

Code injection

Cisco NX-OS 6.12I34 and 7.03I11 on Nexus 9000 N9K devices allows remote attackers to cause a denial of service CPU consumption or control-plane instability or trigger unintended traffic forwarding via a Layer 2 packet with a reserved VLAN number, aka Bug ID CSCuw13560...

CVE-2015-6295

CVE-2015-6295 affects Cisco NX-OS running on Nexus 9000 series: 6.1(2)I3(4) and 7.0(3)I1(1). The vulnerability stems from handling of Layer 2 packets tagged with a reserved VLAN number, due to a lack of validation, which could allow an unauthenticated adjacent attacker to cause a partial DoS via ...

CVE-2015-6295

Cisco NX-OS 6.12I34 and 7.03I11 on Nexus 9000 N9K devices allows remote attackers to cause a denial of service CPU consumption or control-plane instability or trigger unintended traffic forwarding via a Layer 2 packet with a reserved VLAN number, aka Bug ID CSCuw13560...