CVE-2016-1454: Improper Input Validation

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

CVE-2015-6392: Undefined Security Weakness

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device crash via crafted IPv4 DHCP packets to the 1 DHCPv4 relay agent or 2 smart relay agent, aka Bug IDs CSCuq24603,...

CVE-2016-1455

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

Design/Logic Flaw

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

CVE-2016-1455

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

CVE-2016-1455

CVE-2016-1455 affects Cisco Nexus NX-OS before 7.0(3)I2(2e) and before 7.0(3)I4(1) in 7.0(3)I4. The issue is an incorrect iptables local-interface configuration that allows remote attackers to obtain sensitive information via TCP/UDP traffic. The root cause is improper filtering of traffic on loc...

CVE-2016-1455

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

Cisco NX-OS Border Gateway Protocol Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP implementation of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP...

Cisco NX-OS Software Crafted DHCPv4 Packet Denial of Service Vulnerability

A vulnerability in the implementation of the DHCPv4 relay agent and smart relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of crafted DHCPv4 offer...

Cisco NX-OS Software-Based Products Authentication, Authorization, and Accounting Bypass Vulnerability

A vulnerability in the SSH subsystem of the Cisco Nexus family of products could allow an authenticated, remote attacker to bypass authentication, authorization, and accounting AAA restrictions. The vulnerability is due to the improper processing of certain parameters that are passed to an affect...

Cisco NX-OS Software Malformed DHCPv4 Packet Denial of Service Vulnerability

A vulnerability in the implementation of the DHCPv4 relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of malformed DHCPv4 packets. An attacker could...

CVE-2016-1455: Exposure of Sensitive Information to an Unauthorized Actor

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

PT-2016-3710

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.1 through 7.3 Cisco NX-OS versions 11.0 through 11.2 Description A vulnerability in the implementation of the DHCPv4 relay agent and smart relay agent could allow an unauthenticated, remote attacker to cause a denial of...

PT-2016-3562

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.0 through 7.3 Description The issue allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation. This is due to the...

PT-2016-4803

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions prior to 7.03I22e and 7.03I41 Description The issue is caused by an incorrect iptables local-interface configuration, allowing remote attackers to obtain sensitive information via TCP or UDP traffic. This is due to incorre...

PT-2016-4801

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 5.0 through 7.3 Description A buffer overflow issue in the Overlay Transport Virtualization OTV GRE feature allows remote attackers to execute arbitrary code via long parameters in a packet header. The vulnerability is due...

PT-2016-3711

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.1 through 7.3 Cisco NX-OS versions 11.0 through 11.2 Description A vulnerability in the implementation of the DHCPv4 relay agent could allow an unauthenticated, remote attacker to cause a denial of service DoS condition ...

PT-2016-4802

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.0 through 7.3 Cisco NX-OS versions 11.0 through 11.2 Description The issue allows remote attackers to cause a denial of service by sending a crafted BGP UPDATE message, leveraging a peer relationship. This is due to...

Cisco NX-OS GNU C Library (glibc) Buffer Overflow (GHOST)

The version of Cisco NX-OS software running on the remote device is affected by a remote code execution vulnerability known as GHOST. A heap-based buffer overflow condition exists in the GNU C Library glibc due to improper validation of user-supplied input to the glibc functions...

Cisco NX-OS IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability (cisco-sa-20160525-ipv6)

A vulnerability in the IP Version 6 IPv6 packet processing functions of multiple Cisco products could allow an unauthenticated, remote attacker to cause an affected device to stop processing IPv6 traffic, leading to a denial of service DoS condition on the device. Copyright C 2016 Greenbone...