Design/Logic Flaw

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service device reload via a crafted header in a packet, aka Bug ID CSCuu64279...

CVE-2016-1351

CVE-2016-1351 affects Cisco IOS (15.1/15.2) and NX-OS (4.1–6.2) where the Locator/ID Separation Protocol (LISP) is implemented. The root cause is improper input validation of LISP headers, allowing remote unauthenticated attackers to cause a denial of service (device reload) via a crafted UDP hea...

CVE-2016-1351: Improper Input Validation

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service device reload via a crafted header in a packet, aka Bug ID CSCuu64279...

Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability (cisco-sa-20160302-n3k)

A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. Copyright C 2016 Greenbone Networks GmbH...

Cisco NX-OS Software Denial of Service Vulnerability (CNVD-2016-01460)

Cisco NX-OS is a data center-class operating system. A security vulnerability exists in the TCP stack of Cisco NX-OS Software that originates from the incorrect handling of packets within a TCP session when the affected device is in the TIMEWAIT state. Exploitation of this vulnerability by an...

CVE-2015-6260

Cisco NX-OS 7.11N11 on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service SNMP application restart via a crafted packet, aka Bug ID CSCut84645...

Code injection

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

Code injection

Cisco NX-OS 7.11N11 on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service SNMP application restart via a crafted packet, aka Bug ID CSCut84645...

CVE-2015-6260

Cisco NX-OS 7.11N11 on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service SNMP application restart via a crafted packet, aka Bug ID CSCut84645...

CVE-2015-6260

CVE-2015-6260 affects Cisco NX-OS 7.1(1)N1(1) on Nexus 5500/5600/6000. The SNMP input packet processor fails to properly validate SNMP PDUs, allowing an unauthenticated, remote attacker to cause the SNMP application to restart and trigger a DoS. The issue is confirmed in Cisco’s advisory cisco-sa...

CVE-2015-0718

Cisco NX-OS v4.0–6.1 on Nexus 1000V platforms (3000/4000/5000/6000/7000) and UCS may be remotely exploitable via crafted TCP packets while a TIME_WAIT state exists, causing a denial of service (TCP stack reload). Root cause: improper handling of certain TCP closing sequences in TIME_WAIT. Impact:...

CVE-2015-0718

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

Hardcoded credentials

Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...

CVE-2016-1329

CVE-2016-1329 affects Cisco NX-OS on Nexus 3000 (6.0(2)U6(1)–6.0(2)U6(5)) and Nexus 3500 (6.0(2)A6(1)–6.0(2)A6(5), 6.0(2)A7(1)). The root cause is hardcoded/default credentials present in an account created at installation, allowing unauthenticated remote attackers to obtain root privileges via T...

CVE-2016-1329: Improper Authentication

Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...

CVE-2015-0718: Undefined Security Weakness

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

CVE-2015-6260: Improper Input Validation

Cisco NX-OS 7.11N11 on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service SNMP application restart via a crafted packet, aka Bug ID CSCut84645...

Cisco NX-OS Software TCP Netstack Denial of Service Vulnerability

4A vulnerability in the TCP stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper processing of certain TCP packets in the closing sequence of a TCP session while the affected device is in a...

Cisco NX-OS Software SNMP Packet Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco��Nexus 5500 Platform Switches, Cisco��Nexus 5600 Platform Switches, and Cisco��Nexus 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP...

PT-2016-1516

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.0 through 6.1 Description The issue is related to errors in resource management, allowing a remote attacker to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIME WAIT TC...