Lucene search
+L

1993 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2024/07/02 12:00 a.m.75 views

Cisco NX-OS Command Injection Vulnerability

Cisco NX-OS contains a command injection vulnerability in the command line interface CLI that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device...

6.7CVSS7.5AI score0.04306EPSS
SaveIn wildExploits1
OSV
OSV
added 2024/07/01 5:15 p.m.9 views

CVE-2024-20399

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

6.7CVSS6.1AI score0.04306EPSS
SaveExploits1References3
NVD
NVD
added 2024/07/01 5:15 p.m.41 views

CVE-2024-20399

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

6.7CVSS0.04306EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/07/01 4:11 p.m.34 views

CVE-2024-20399 Cisco NX-OS Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

6CVSS7AI score0.04306EPSS
SaveExploits1References1
CVE
CVE
added 2024/07/01 4:11 p.m.482 views

CVE-2024-20399

Cisco NX-OS Software contains a CLI command injection vulnerability (CVE-2024-20399) that could allow an authenticated administrator to execute arbitrary root commands on the underlying OS. The issue arises from insufficient validation of parameters passed to specific configuration CLI commands, ...

6.7CVSS7AI score0.04306EPSS
SaveIn wildExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/07/01 4:11 p.m.73 views

CVE-2024-20399 Cisco NX-OS Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

6CVSS0.04306EPSS
SaveExploits1References1
Cisco
Cisco
added 2024/07/01 4:00 p.m.43 views

Cisco NX-OS Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

6CVSS6.9AI score0.04306EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/07/01 12:00 a.m.6 views

PT-2024-4435

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to the fixed version Description A vulnerability in the Command Line Interface CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary...

6.7CVSS7.2AI score0.04306EPSS
SaveExploits1References98
Tenable Nessus
Tenable Nessus
added 2024/07/01 12:00 a.m.53 views

Cisco NX-OS Software CLI Comm Injection (cisco-sa-nxos-cmd-injection-xD9OhyOP)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This...

6.7CVSS8.1AI score0.04306EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2024/07/01 12:00 a.m.39 views

CVE-2024-20399

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

6.7CVSS7.2AI score0.04306EPSS
SaveIn wildExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/05/15 11:37 p.m.70 views

Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.

Summary Public disclosed OpenSSL vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches. The vulnerability has been addressed and can be resolved by applying the NX-OS code level listed below. CVE-2023-2650. Vulnerability Details CVEID:CVE-2023-2650 DESCRIPTION: OpenSSL is...

6.5CVSS7AI score0.75116EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/03/28 7:50 p.m.42 views

Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.

Summary Public disclosed OpenSSL vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches. The vulnerability has been addressed and can be resolved by applying the NX-OS code level listed below. Vulnerability Details CVEID:CVE-2023-0464 DESCRIPTION: OpenSSL is vulnerable to a...

7.5CVSS7.7AI score0.03658EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/03/28 7:47 p.m.55 views

Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.

Summary Public disclosed OpenSSL vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches. The vulnerability has been addressed and can be resolved by applying the NX-OS code level listed below. Vulnerability Details CVEID:CVE-2023-0466 DESCRIPTION: OpenSSL could allow a remo...

5.3CVSS6.3AI score0.01625EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/03/08 12:00 a.m.21 views

Cisco NX-OS Buffer Copy without Checking Size of Input (CVE-2024-20267)

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS7.8AI score0.00926EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/08 12:00 a.m.32 views

Cisco NX-OS Allocation of Resources Without Limits or Throttling (CVE-2024-20321)

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS7.8AI score0.00709EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/06 12:00 a.m.30 views

Cisco NX-OS Software Link Layer Discovery Protocol DoS (cisco-sa-nxos-lldp-dos-z7PncTgt)

According to its self-reported version, Cisco NX-OS System Software is affected by a denial of service DoS vulnerability. The vulnerability lies in the Link Layer Discovery Protocol LLDP feature of Cisco NX-OS Software and could allow an unauthenticated, adjacent attacker to cause a denial of...

6.6CVSS6.5AI score0.00318EPSS
SaveExploits0References11
CISA
CISA
added 2024/03/01 12:00 p.m.10 views

Cisco Releases Security Advisories for Cisco NX-OS Software

Cisco released security advisories to address vulnerabilities affecting Cisco NX-OS Software. A cyber threat actor could exploit one of these vulnerabilities to cause a denial-of-service condition. CISA encourages users and administrators to review the following advisories and apply the necessary...

7.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/01 12:00 a.m.37 views

Cisco Nexus 3600 External BGP DoS (cisco-sa-nxos-po-acl-TkyePgvL)

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS7.8AI score0.00709EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/03/01 12:00 a.m.21 views

Cisco NX-OS Software MPLS Encapsulated IPv6 DoS (cisco-sa-ipv6-mpls-dos-R9ycXkwM)

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS7.8AI score0.00926EPSS
SaveExploits0References5
NVD
NVD
added 2024/02/29 1:43 a.m.25 views

CVE-2024-20321

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS8.4AI score0.00709EPSS
SaveExploits0References1
Rows per page
Query Builder