1993 matches found
Design/Logic Flaw
The CLI parser in Cisco NX-OS 4.12E11, 6.211b, 6.212, 7.20ZZ99.1, 7.20ZZ99.3, and 9.11SV13.1.8 on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and...
Design/Logic Flaw
Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856...
CVE-2015-4231
The Python interpreter in Cisco NX-OS 6.28a on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416...
Input validation
Cisco NX-OS 6.02 and 6.22 on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127...
Design/Logic Flaw
The Python interpreter in Cisco NX-OS 6.28a on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416...
CVE-2015-4231
The Python interpreter in Cisco NX-OS 6.28a on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416...
CVE-2015-4231
Cisco NX-OS 6.2(8a) on Nexus 7000 devices is affected by CVE-2015-4231 due to incomplete privilege separation in the Python scripting engine across multiple VDCs. An authenticated local attacker with administrative privileges in one VDC can bypass access restrictions and delete files owned by a d...
CVE-2015-4237
CVE-2015-4237 affects Cisco NX-OS on Nexus switches (NX-OS versions listed in the Cisco/NVD entries). The vulnerability is in the CLI parser where improper validation of special characters in filenames allows an authenticated, local attacker to run arbitrary OS commands, enabling local privilege ...
CVE-2015-4232
Cisco NX-OS (Nexus/MDS 9000) devices are affected by CVE-2015-4232 due to insufficient input sanitization of tar parameters in the CLI, allowing a local authenticated user to execute arbitrary OS commands with user privileges. The vulnerability arises from how the tar command parameters are parse...
CVE-2015-4234
Cisco NX-OS on Nexus devices (6.0(2) and 6.2(2)) is affected by a local privilege-escalation flaw in the Python scripting subsystem, allowing a locally authenticated user to obtain root via improper OS configuration and input to the Python interpreter. Exploitation requires local access and authe...
CVE-2015-4237
The CLI parser in Cisco NX-OS 4.12E11, 6.211b, 6.212, 7.20ZZ99.1, 7.20ZZ99.3, and 9.11SV13.1.8 on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and...
CVE-2015-4232
Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856...
CVE-2015-4234
Cisco NX-OS 6.02 and 6.22 on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127...
Cisco Nexus Devices Python Subsystem Local Privilege Escalation Vulnerabilities
Multiple privilege escalation vulnerabilities in the Python subsystem of Cisco Nexus devices running Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges. The vulnerabilities are due to insufficient hardening of the operating system on which NX-OS is...
Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability
A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. The vulnerability exists due to insufficient input sanitization of...
CVE-2015-4213
Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...
Command injection
Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...
CVE-2015-4213
CVE-2015-4213 affects Cisco NX-OS 1.1(1g) on Nexus 9000 series devices, enabling remote authenticated users to discover cleartext passwords via the decryption mechanism (Bug CSCuu84391). Root cause is the decryption implementation, which allows exposure of plaintext credentials. The issue is miti...