Cisco NX-OS Software Command Injection (cisco-sa-20190515-nxos-cmdinj-1770)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability due to insufficient validation of arguments passed to a specific CLI command. An authenticated, local attacker can exploit these vulnerabilities by including malicious input as the argume...

Cisco NX-OS Software Command Injection (cisco-sa-20190515-nxos-cmdinj-1735)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability due to insufficient validation of arguments passed to certain CLI commands on an affected device. An authenticated, local attacker can exploit this to execute arbitrary commands on the...

Cisco NX-OS Software Multiple Vulnerabilities (cisco-sa-20190515-nxos-cmdinj-1774-1775)

According to its self-reported version, Cisco NX-OS Software is affected by two command injection vulnerabilities due to insufficient validation of arguments passed to certain CLI commands. An authenticated, local attacker could exploit these vulnerabilities to execute arbitrary commands on the...

Cisco NX-OS Software Command Injection (CVE-2019-1784)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability due to insufficient validation of arguments passed to a specific CLI command on an affected device. An unauthenticated, local attacker can exploit this to execute arbitrary commands on th...

Cisco NX-OS Border Gateway Protocol DoS (cisco-sa-20161005-bgp)

According to its self-reported version, a denial of service DoS vulnerability exists in the Border Gateway Protocol BGP implementation of Cisco NX-OS System Software due to incomplete input validation of BGP update messages. An unauthenticated, remote attacker can exploit this issue, by sending a...

CVE-2019-1734

A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive system files that should be restricted. The attacker could use this information to conduct additional reconnaissance...

Design/Logic Flaw

A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive system files that should be restricted. The attacker could use this information to conduct additional reconnaissance...

CVE-2019-1734 Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability

A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive system files that should be restricted. The attacker could use this information to conduct additional reconnaissance...

CVE-2019-1734

CVE-2019-1734 affects Cisco FXOS and NX-OS Software. Root cause: incomplete RBAC verification in a CLI diagnostic command, allowing an authenticated, local attacker to arbitrarily read sensitive files with valid credentials. Impact: information disclosure; no exploitation details provided beyond ...

CVE-2019-1734 Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability

A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive system files that should be restricted. The attacker could use this information to conduct additional reconnaissance...

Cisco NX-OS Software Command Injection Vulnerabilities (cisco-sa-20190515-fxos-nxos-cmdinj-1781-1782)

According to its self-reported version, Cisco NX-OS Software is affected by vulnerabilities in the CLI that could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of...

Cisco NX-OS Software Command Injection Vulnerability (cisco-sa-20190925-nxos-vman-cmd-inj)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in a CLI command related to the virtualization manager VMAN in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with...

Cisco NX-OS Software Virtual Service Image Signature Bypass Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. The vulnerability allows an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device...

The vulnerability of the SNMP protocol implementation in NX-OS and FX-OS network operating systems allows a intruder to trigger a maintenance failure.

The vulnerability of SNMP protocol implementations in NX-OS and FX-OS networks exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using a specially crafted SNMP packet...

Cisco NX-OS and Cisco IOS XE Data Forgery Issue Vulnerabilities

Cisco NX-OS Software and IOS XE are both products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.IOS XE is a set of operating systems developed for use with its network devices. Cisco NX-OS and Cisco IOS XE in the data forgery...

CVE-2019-12717

A vulnerability in a CLI command related to the virtualization manager VMAN in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of...

CVE-2019-12662

A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper...

Input validation

A vulnerability in a CLI command related to the virtualization manager VMAN in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of...

Design/Logic Flaw

A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper...

CVE-2019-12717

CVE-2019-12717 affects Cisco NX-OS Software via a VMAN CLI command injection vulnerability. The root cause is insufficient validation of arguments passed to a specific VMAN CLI command, allowing an authenticated, local attacker (with administrator credentials) to run arbitrary commands on the und...