Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to...

Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. The attacker must authenticate with valid user credentials...

Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability

According to its self-reported version, a distributed denial of service DDoS vulnerability exists in the 802.1X implementation for Cisco NX-OS Software due to incomplete input validation of EAPOL frames. An unauthenticated, remote attacker can exploit this by sending a crafted EAPOL frame to an...

Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability

According to its self-reported version, a bash shell implementation for Cisco NX-OS software is affected access control bypass privilege vulnerability. An authenticated local attacker can escalate their privilege level by executing commands authorized to other user roles. TRUSTED...

Cisco NX-OS Software Cisco Fabric Services Denial of Service Vulnerability

According to its self-reported version, the Cisco NX-OS Software is affected by a denial of service DoS vulnerability. It exists in Cisco fabric services due to insufficient validation of Cisco fabric service packets. An unauthenticated, remote attacker can exploit this issue, via sending a craft...

Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...

Cisco NX-OS Software SSH Key Information Disclosure Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by an information disclosure vulnerability in the SSH CLI key management functionality which could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device...

Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command...

The vulnerability of the command-line interface of the Cisco NX-OS network operating system allows a attacker to execute arbitrary code with elevated privileges.

The vulnerability of the Cisco NX-OS network operating system’s command-line interface CLI is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges on the base operating system...

The vulnerability of the command-line interface of Cisco NX-OS and FX-OS allows a attacker to execute arbitrary code with elevated privileges.

The vulnerability of the command-line interface in Cisco NX-OS and FX-OS network operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges on the underlying operating system...

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.The vulnerability is due to insufficie...

The vulnerability of the Python script subsystem of the NX-OS network operating system allows a hacker to execute arbitrary commands and increase their privileges.

The vulnerability of the Python script subsystem in the NX-OS network operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary commands and increase their privileges...

The vulnerability of the command-line interface of networking operating systems FX-OS and NX-OS allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the command-line interface of networking operating systems FX-OS and NX-OS is related to insufficient checking of arguments passed to certain CLI commands. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands...

Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. T...

Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected...

Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by following a vulnerability in the NX API NX-API Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the NX-API Sandbox...

Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities

According to its self-reported version, Cisco FXOS Software and Cisco NX-OS Software are affected by multiple vulnerabilities which could allow an unauthenticated, remote attacker to cause a denial of service attack DoS. The vulnerabilities are due to the improper parsing of LDAP packets by an...

Cisco NX-OS Software Unauthorized Directory Access Vulnerability

According to its self-reported version, the Cisco NX-OS Software is affected by an unauthorized directory access vulnerability. This is due to a flaw in the implementation of file system permissions. An authenticated, local attacker could exploit this to access sensitive and critical files on the...

CVE-2019-1780

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to...

Input validation

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to...