Cisco Nexus Devices Python Subsystem Local Privilege Escalation Vulnerabilities

Multiple privilege escalation vulnerabilities in the Python subsystem of Cisco Nexus devices running Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges. The vulnerabilities are due to insufficient hardening of the operating system on which NX-OS is...

Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. The vulnerability exists due to insufficient input sanitization of...

PT-2015-2235

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.28a Description The issue is related to incomplete privilege separation of the Python scripting engine across multiple virtual device contexts VDCs in Cisco NX-OS. This allows an attacker with administrative privileges in...

PT-2015-2236

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.210 Description The issue is related to insufficient access control to files in the network operating system, allowing a local attacker to execute arbitrary OS commands by passing special parameters. This is due to...

PT-2015-2234

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC versions 1.01.110a through 1.01e Description The issue is related to improper implementation of Role-Based Access Control RBAC health scoring, allowing remote authenticated users to obtai...

CVE-2015-4213

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

Command injection

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

CVE-2015-4213

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

CVE-2015-4213

CVE-2015-4213 affects Cisco NX-OS 1.1(1g) on Nexus 9000 series devices, enabling remote authenticated users to discover cleartext passwords via the decryption mechanism (Bug CSCuu84391). Root cause is the decryption implementation, which allows exposure of plaintext credentials. The issue is miti...

PT-2015-2233

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 1.11g Description The issue is related to a lack of protection for internal data in the network operating system, which can be exploited by a remote authenticated attacker to gain access to user passwords in cleartext...

CVE-2015-4213: Exposure of Sensitive Information to an Unauthorized Actor

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

Code injection

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

CVE-2015-4197

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

CVE-2015-4197: Improper Input Validation

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Link Layer Discovery Protocol LLDP code of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to crash an affected device. The vulnerability is due to an error in parsing a malformed LLDP packet. An attacker could exploit this vulnerability by sending a...

PT-2015-2232

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 5.25 Description The issue is caused by insufficient input validation in the Link Layer Discovery Protocol LLDP code, allowing an attacker to send a malformed LLDP packet on the local network and cause a denial of service...

CVE-2015-0775

The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...

Cross site request forgery (csrf)

The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...

CVE-2015-0775

The CVE-2015-0775 issue affects Cisco NX-OS banner/MOTD handling across multiple platforms (Nexus 4000, Nexus 1000V, Nexus 5000, MDS 9000, Nexus 7000, Nexus 9000, Nexus 3000). The vulnerability allows remote unauthenticated attackers to cause a denial of service by triggering a login-process rese...

CVE-2015-0775

The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...