Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service (CVE-2018-0311)

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software insufficiently validates...

Cisco Nexus Operating System Address Resolution Protocol Denial of Service (CVE-2015-4323)

"Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.30ZN0.9 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501410; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/12/25"; scriptcveid"CVE-2015-4323";...

Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2014-2201)

The Message Transfer Service MTS in Cisco NX-OS before 6.27 on MDS 9000 devices and 6.0 before 6.02 on Nexus 7000 devices allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a large volume of crafted traffic, aka Bug ID CSCtw98915. This plugin only...

Cisco NX-OS Software Buffer Overflow and Command Injection (CVE-2019-1767)

A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with...

Cisco NX-OS Software Protocol Independent Multicast Denial of Service (CVE-2021-1367)

A vulnerability in the Protocol Independent Multicast PIM feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...

Cisco FXOS, NX-OS, and UCS Manager Software Cisco Discovery Protocol Denial of Service (CVE-2018-0331)

A vulnerability in the Cisco Discovery Protocol formerly known as CDP subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to create a denial of service DoS condition. The vulnerability is due to a failure t...

Cisco NX-OS Software NX-API Privilege Escalation (CVE-2018-0330)

A vulnerability in the NX-API management application programming interface API in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain...

Cisco NX-OS Software Unauthorized Filesystem Access (CVE-2019-1601)

A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to impose strict filesystem permissions on the targeted device. An attacker coul...

Cisco NX-OS Software Virtualization Manager Command Injection (CVE-2019-12717)

A vulnerability in a CLI command related to the virtualization manager VMAN in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of...

Cisco FXOS and NX-OS System Software Authentication, Authorization, and Accounting Denial of Service (CVE-2017-3883)

A vulnerability in the authentication, authorization, and accounting AAA implementation of Cisco Firepower Extensible Operating System FXOS and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA process...

Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service (CVE-2022-20624)

A vulnerability in the Cisco Fabric Services over IP CFSoIP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacke...

Cisco NX-OS Software NX-API Arbitrary Code Execution (CVE-2018-0301)

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1780)

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to...

Vulnerability discovered in Cisco ACI Multi-Site CloudSec Encryption

Cisco has discovered in internal testing that the encryption as used with ACI Multi-Site CloudSec is not sufficient to provide adequate protection in the event of a man-in-the-middle attack. A malicious party capable of tapping the encrypted traffic between two ACI sites, and has sufficient...

The vulnerability of the erase-write function in Cisco NX-OS and Cisco FXOS operating systems of Cisco devices allows attackers to increase their privileges.

The vulnerability of the erase-write function in Cisco NX-OS and Cisco FXOS operating systems in Cisco devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the command-line interface (CLI) of the Cisco NX-OS operating system for Cisco switches allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of the Cisco NX-OS operating system for Cisco switches exists because measures are not taken to eliminate the special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary command...

Vulnerabilities fixed in Cisco NX-OS

Cisco has fixed vulnerabilities in NX-OS. The vulnerability with attribute CVE-2022-20050 can be exploited by a local, authenticated malicious person to exploit arbitrary code execute arbitrary code at the system level by exploiting command-line injection. Also, a bug has been fixed in the...

CVE-2023-20050

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...

CVE-2023-20050

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...

Input validation

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...