CVE-2014-8013

The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service device reload via a long CLI command, aka Bug ID CSCur54182...

CVE-2014-8013

CVE-2014-8013 concerns Cisco NX-OS TACACS+ command authorization where an authenticated, local attacker can cause a device reload by submitting very long CLI commands. The root cause is improper processing of long CLI inputs in the TACACS+ command-authorization feature. Impact is denial of servic...

CVE-2014-8013: Improper Input Validation

The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service device reload via a long CLI command, aka Bug ID CSCur54182...

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability

A vulnerability in the TACACS+ command authorization feature of Cisco NX-OS Software could allow an authenticated, local attacker to cause the system to reset. The vulnerability is due to incorrect processing of very long command-line interface CLI commands by the TACACS+ command authorization...

PT-2015-3984

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the TACACS+ command-authorization implementation, which allows local users to cause a denial of service by executing a long CLI command. This is due to incorrect...

Cisco MDS 9000 Series Denial of Service Vulnerability

A vulnerability in the high availability HA subsystem of Cisco NX-OS running on MDS 9000 series devices could allow an unauthenticated, remote attacker to cause a denial of device DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...

CVE-2015-0582

The High Availability HA subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129...

CVE-2015-0582

CVE-2015-0582 affects Cisco MDS 9000 NX-OS High Availability (HA) subsystem. A denial-of-service condition can be triggered by crafted traffic sent to vulnerable MDS 9000 devices, due to insufficient input validation within the HA component. Impact is DoS on the device, not data exfiltration or c...

CVE-2015-0582

The High Availability HA subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129...

PT-2015-4728

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on MDS 9000 devices affected versions not specified Description The issue concerns the High Availability HA subsystem, which allows remote attackers to cause a denial of service via crafted traffic. Recommendations At the moment,...

CVE-2015-0582: Improper Input Validation

The High Availability HA subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129...

Cisco NX-OS GNU Bash Environment Variable Command Injection Vulnerability (cisco-sa-20140926-bash) (Shellshock)

According to its self-reported version, the remote NX-OS device is affected by a command injection vulnerability in GNU Bash known as Shellshock, which is due to the processing of trailing strings after function definitions in the values of environment variables. This allows a remote attacker to...

Cisco NX-OS Arbitrary File Read Vulnerability (CSCul23419)

A vulnerability in the command-line interface CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access the contents of arbitrary files on the affected device. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, an...

Cisco NX-OS Arbitrary File Read Vulnerability (CSCul05217 / CSCul23419)

According to its self-reported version, the remote NX-OS device is affected by a directory traversal vulnerability due to improper filtering of user input in its command line interface CLI. An authenticated, local attacker could access arbitrary files on the device. C Tenable Network Security, In...

CVE-2014-3341

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

Design/Logic Flaw

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

CVE-2014-3341

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

CVE-2014-3341

The CVE-2014-3341 issue affects Cisco NX-OS Software SNMP module on Nexus 5000/6000 and versions up to 7.0(3)N1(1). The vulnerability arises because the SNMP service returns different error messages for invalid requests depending on whether the VLAN ID exists, enabling remote attackers to enumera...

CVE-2014-3341: Exposure of Sensitive Information to an Unauthorized Actor

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

Cisco NX-OS Software SNMP Information Disclosure Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP module of Cisco NX-OS Software could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to a failure to respond to invalid requests in the same manner when specifying a VLAN ID. An...