PT-2014-5233

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 7.03N11 and earlier Description A vulnerability in the Simple Network Management Protocol SNMP module of Cisco NX-OS Software could allow an unauthenticated, remote attacker to access sensitive information. The vulnerabili...

CVE-2014-3330

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

Design/Logic Flaw

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

CVE-2014-3330

Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches contains an ACL logging policy-check flaw that can allow a remote attacker to bypass access restrictions by flooding the device with packets that match a log-enabled policy (Bug CSCuo02489). The issue affects the way logged packets are processed and ...

CVE-2014-3330

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

CVE-2014-3330: Undefined Security Weakness

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

PT-2014-5223

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.12I21 Description The issue is related to the improper processing of packet-drop policy checks for logged packets, allowing remote attackers to bypass intended access restrictions. This can be achieved by sending a flood ...

CVE-2014-3295

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...

Authentication flaw

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...

CVE-2014-3295

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...

CVE-2014-3295

CVE-2014-3295 affects Cisco NX-OS HSRP authentication: malformed HSRP packets can bypass authentication and cause DoS by manipulating group-member states and traffic blackholing on Cisco NX-OS versions 6.2(2a) and earlier. Connected sources confirm the issue in the HSRP parsing logic (Bug CSCup11...

CVE-2014-3295: Improper Authentication

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...

PT-2014-5190

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.22a and earlier Description The issue allows remote attackers to bypass authentication and cause a denial of service, including group-member state modification and traffic blackholing, via malformed HSRP packets. This is...

Cisco NX-OS Multiple Vulnerabilities (cisco-sa-20140521-nxos)

According to its self-reported version, the remote NX-OS device is reportedly affected by one or more of the following vulnerabilities : - A privilege escalation flaw exists on systems with multiple virtual device contexts VDCs and local authentication configured. This could allow a remote,...

Cisco NX-OS multiple security vulnerabilities

Privilege escalation, buffer overflow, DoS...

CVE-2014-3261

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

CVE-2013-1191

Cisco NX-OS 6.1 before 6.15 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400...

CVE-2014-2200

Cisco NX-OS 5.0 before 5.05 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629...

CVE-2014-2201

The Message Transfer Service MTS in Cisco NX-OS before 6.27 on MDS 9000 devices and 6.0 before 6.02 on Nexus 7000 devices allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a large volume of crafted traffic, aka Bug ID CSCtw98915...

Authentication flaw

Cisco NX-OS 6.1 before 6.15 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400...