2537 matches found
CVE-2015-0775: Undefined Security Weakness
The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...
Cisco Nexus and Cisco Multilayer Director Switches MOTD Telnet Login Reset Vulnerability
A vulnerability in the Message of the Day MOTD or banner functionality of the NX-OS Software could allow an unauthenticated, remote attacker to cause the login process to reset. The vulnerability is due to the MOTD display handling when a certain type of terminal session is requested via Telnet...
PT-2015-2231
Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.12E11f through 7.20ZN99.67 Description The issue is related to the implementation of the banner MOTD in Cisco NX-OS, which allows remote attackers to cause a denial of service login process reset via an unspecified...
Cisco NX-OS HSRP DoS (CSCup11309)
The remote Cisco device contains a flaw in the Hot Standby Router Protocol HSRP authentication. A remote attacker, using a specially crafted HSRP packet, can bypass HSRP authentication and configure HSRP group members to the SPEAK state, causing a denial of service. TRUSTED...
Cisco NX-OS OpenSSL Multiple Vulnerabilities (cisco-sa-20150310-ssl) (FREAK)
The remote Cisco device is running a version of NX-OS software that is affected by multiple vulnerabilities in its bundled OpenSSL library: - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows a remote attacker, using an...
Cisco NX-OS DHCP POAP Command Injection Vulnerability
The remote Cisco device is running a version of NX-OS software that is affected by a command injection vulnerability due to the PowerOn Auto Provisioning POAP feature not properly validating the DHCP options returned by POAP. An attacker on an adjacent network, using crafted DHCP packets, can...
CVE-2015-0686
The SNMP implementation in Cisco NX-OS 6.12I23 on Nexus 9000 devices, when a Reset High Availability HA policy is configured, allows remote authenticated users to cause a denial of service device reload via unspecified vectors, aka Bug ID CSCuq92240...
CVE-2015-0686
The SNMP implementation in Cisco NX-OS 6.12I23 on Nexus 9000 devices, when a Reset High Availability HA policy is configured, allows remote authenticated users to cause a denial of service device reload via unspecified vectors, aka Bug ID CSCuq92240...
CVE-2015-0686
CVE-2015-0686 affects Cisco Nexus 9000 Series running Cisco NX-OS 6.1(2)I2(3). The SNMP subsystem vulnerability triggered when the High Availability policy is set to Reset allows remote authenticated users to cause a denial of service (device reload). The issue is specific to Nexus 9000 platforms...
CVE-2015-0686: Undefined Security Weakness
The SNMP implementation in Cisco NX-OS 6.12I23 on Nexus 9000 devices, when a Reset High Availability HA policy is configured, allows remote authenticated users to cause a denial of service device reload via unspecified vectors, aka Bug ID CSCuq92240...
PT-2015-4809
Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.12I23 Description A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a denial of service DoS condition. The issue occurs when the High Availability HA policy is set to Reset. An...
CVE-2015-0658
The DHCP implementation in the PowerOn Auto Provisioning POAP feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589...
Design/Logic Flaw
The DHCP implementation in the PowerOn Auto Provisioning POAP feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589...
CVE-2015-0658
Cisco NX-OS POAP DHCP Options Command Injection (CVE-2015-0658). The POAP DHCP initialization validation is insufficient, allowing an adjacent attacker to send crafted DHCP packets and execute arbitrary commands as root on the affected device. Impact is remote code execution with root privileges ...
CVE-2015-0658: Improper Input Validation
The DHCP implementation in the PowerOn Auto Provisioning POAP feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589...
Cisco NX-OS Software DHCP Options Command Injection Vulnerability
A vulnerability in DHCP code used with PowerOn Auto Provisioning POAP of Cisco NX-OS could allow an unauthenticated, adjacent attacker to inject arbitrary commands into the Cisco NX-OS device. The vulnerability is due to insufficient input validation of the DHCP options returned as a result of...
PT-2015-4785
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the DHCP implementation in the PowerOn Auto Provisioning POAP feature, which does not properly restrict the initialization process. This allows remote attackers to...
Cisco NX-OS Multiple ntpd Vulnerabilities
The remote Cisco device is running a version of NX-OS software that is affected by the following vulnerabilities : - Errors exist related to weak cryptographic pseudorandom number generation PRNG, the functions 'ntprandom' and and 'configauth', and the 'ntp-keygen' utility. A man-in-the-middle...