Authentication flaw

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...

CVE-2014-3295

CVE-2014-3295 affects Cisco NX-OS HSRP authentication: malformed HSRP packets can bypass authentication and cause DoS by manipulating group-member states and traffic blackholing on Cisco NX-OS versions 6.2(2a) and earlier. Connected sources confirm the issue in the HSRP parsing logic (Bug CSCup11...

CVE-2014-3295

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...

Cisco NX-OS multiple security vulnerabilities

Privilege escalation, buffer overflow, DoS...

Cisco NX-OS Multiple Vulnerabilities (cisco-sa-20140521-nxos)

According to its self-reported version, the remote NX-OS device is reportedly affected by one or more of the following vulnerabilities : - A privilege escalation flaw exists on systems with multiple virtual device contexts VDCs and local authentication configured. This could allow a remote,...

CVE-2014-3261

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

CVE-2014-2200

Cisco NX-OS 5.0 before 5.05 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629...

CVE-2013-1191

Cisco NX-OS 6.1 before 6.15 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400...

CVE-2014-2201

The Message Transfer Service MTS in Cisco NX-OS before 6.27 on MDS 9000 devices and 6.0 before 6.02 on Nexus 7000 devices allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a large volume of crafted traffic, aka Bug ID CSCtw98915...

Null pointer dereference

The Message Transfer Service MTS in Cisco NX-OS before 6.27 on MDS 9000 devices and 6.0 before 6.02 on Nexus 7000 devices allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a large volume of crafted traffic, aka Bug ID CSCtw98915...

Authentication flaw

Cisco NX-OS 6.1 before 6.15 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400...

Authentication flaw

Cisco NX-OS 5.0 before 5.05 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629...

Buffer overflow

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

CVE-2014-3261

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

CVE-2014-2201

The Message Transfer Service MTS in Cisco NX-OS before 6.27 on MDS 9000 devices and 6.0 before 6.02 on Nexus 7000 devices allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a large volume of crafted traffic, aka Bug ID CSCtw98915...

CVE-2014-3261

CVE-2014-3261 details a buffer overflow in Cisco NX-OS Smart Call Home, exploitable via crafted SMTP replies to remote SMTP servers. Affected platforms include Cisco UCS NX-OS on Fabric Interconnects, Nexus 3000/4000/5000/7000, and CGOS CG4 (with specific version ranges provided in the Cisco and ...

CVE-2013-1191

Cisco NX-OS 6.1 before 6.15 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400...

CVE-2014-2200

CVE-2014-2200 affects Cisco NX-OS 5.0 (before 5.0(5)) on Nexus 7000 devices with local authentication and multiple VDCs enabled. A remote, authenticated user can escalate privileges to an unintended VDC via SSH to a management interface (Bug CSCti11629). The issue is documented in Cisco’s NX-OS a...

CVE-2013-1191

Cisco NX-OS vulnerability (CVE-2013-1191) affects Nexus 7000 devices running 6.1 prior to 6.1(5) with local authentication and multiple VDCs enabled. An authenticated remote user can escalate privileges within an unintended VDC by sending crafted SSH key data during an SSH session to a management...

CVE-2014-2200

Cisco NX-OS 5.0 before 5.05 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629...