CVE-2014-8013

The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service device reload via a long CLI command, aka Bug ID CSCur54182...

CVE-2014-8013

CVE-2014-8013 concerns Cisco NX-OS TACACS+ command authorization where an authenticated, local attacker can cause a device reload by submitting very long CLI commands. The root cause is improper processing of long CLI inputs in the TACACS+ command-authorization feature. Impact is denial of servic...

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability

A vulnerability in the TACACS+ command authorization feature of Cisco NX-OS Software could allow an authenticated, local attacker to cause the system to reset. The vulnerability is due to incorrect processing of very long command-line interface CLI commands by the TACACS+ command authorization...

Cisco MDS 9000 Series Denial of Service Vulnerability

A vulnerability in the high availability HA subsystem of Cisco NX-OS running on MDS 9000 series devices could allow an unauthenticated, remote attacker to cause a denial of device DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...

CVE-2015-0582

The High Availability HA subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129...

CVE-2015-0582

CVE-2015-0582 affects Cisco MDS 9000 NX-OS High Availability (HA) subsystem. A denial-of-service condition can be triggered by crafted traffic sent to vulnerable MDS 9000 devices, due to insufficient input validation within the HA component. Impact is DoS on the device, not data exfiltration or c...

CVE-2015-0582

The High Availability HA subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129...

Cisco NX-OS GNU Bash Environment Variable Command Injection Vulnerability (cisco-sa-20140926-bash) (Shellshock)

According to its self-reported version, the remote NX-OS device is affected by a command injection vulnerability in GNU Bash known as Shellshock, which is due to the processing of trailing strings after function definitions in the values of environment variables. This allows a remote attacker to...

Cisco NX-OS Arbitrary File Read Vulnerability (CSCul23419)

A vulnerability in the command-line interface CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access the contents of arbitrary files on the affected device. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, an...

Cisco NX-OS Arbitrary File Read Vulnerability (CSCul05217 / CSCul23419)

According to its self-reported version, the remote NX-OS device is affected by a directory traversal vulnerability due to improper filtering of user input in its command line interface CLI. An authenticated, local attacker could access arbitrary files on the device. C Tenable Network Security, In...

CVE-2014-3341

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

Design/Logic Flaw

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

CVE-2014-3341

The CVE-2014-3341 issue affects Cisco NX-OS Software SNMP module on Nexus 5000/6000 and versions up to 7.0(3)N1(1). The vulnerability arises because the SNMP service returns different error messages for invalid requests depending on whether the VLAN ID exists, enabling remote attackers to enumera...

CVE-2014-3341

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

Cisco NX-OS Software SNMP Information Disclosure Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP module of Cisco NX-OS Software could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to a failure to respond to invalid requests in the same manner when specifying a VLAN ID. An...

CVE-2014-3330

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

Design/Logic Flaw

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

CVE-2014-3330

Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches contains an ACL logging policy-check flaw that can allow a remote attacker to bypass access restrictions by flooding the device with packets that match a log-enabled policy (Bug CSCuo02489). The issue affects the way logged packets are processed and ...

CVE-2014-3330

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

CVE-2014-3295

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...