Cisco NX-OS Uncontrolled Resource Consumption (CVE-2018-0090)

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

Cisco NX-OS Improper Input Validation (CVE-2014-8013)

The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service device reload via a long CLI command, aka Bug ID CSCur54182. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Cisco NX-OS Improper Verification of Cryptographic Signature (CVE-2017-12333)

A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX- OS signature verification for software images. An authenticated, local attacker could exploit th...

Cisco NX-OS Improper Input Validation (CVE-2013-6683)

The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attackers to cause a denial of service NS processing outage via a series of malformed packets, aka Bug ID CSCtd15904. This plugin only works with Tenable.ot. Please visit...

Cisco NX-OS Exposure of Resource to Wrong Sphere (CVE-2017-12351)

A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the scope of the guest shell container. An attacker would need valid administrator credentials to perform this attack. The vulnerability is due t...

Cisco NX-OS Improper Input Validation (CVE-2012-4076)

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...

Cisco NX-OS Improper Encoding or Escaping of Output (CVE-2017-12340)

A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash...

Cisco NX-OS Resource Management Errors (CVE-2015-6394)

The kernel in Cisco NX-OS 5.29N11 on Nexus 5000 devices allows local users to cause a denial of service device crash via crafted USB parameters, aka Bug ID CSCus89408. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Cisco NX-OS Command Injection (CVE-2017-12330)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...

Cisco NX-OS Improper Input Validation (CVE-2014-0677)

The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851. This plugin only works with Tenable.ot. Please visit...

Cisco NX-OS Fibre Channel over Ethernet Denial of Service (CVE-2017-6655)

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software o...

Cisco NX-OS Improper Input Validation (CVE-2012-4122)

The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...

Cisco NX-OS 5.2 and 6.1 Denial of Service (CVE-2012-3051)

Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service process crash or packet loss via a large number of ARP packets, aka Bug ID CSCtr44822. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...

Cisco NX-OS Command Injection (CVE-2017-12335)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command...

Cisco NX-OS Command Injection (CVE-2017-12339)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...

Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2012-4121)

Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed 1 r and 2 w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Cisco NX-OS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2012-1357)

The igmpsnooporibfillsourceupdate function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service device reload via IGMP packets, aka Bug ID CSCts46521. This plugin only works with Tenable.ot. Please visit...

Cisco NX-OS Resource Management Errors (CVE-2012-6396)

Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service memory consumption via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID...

Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2011-2569)

Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188. This...

Cisco NX-OS Improper Authentication (CVE-2014-3295)

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309. This plugin only works with Tenable.ot. Please visit...