Cisco NX-OS Software and Cisco FXOS Software Command Injection Vulnerabilities

Cisco Firepower 4100 Series and others are products of Cisco Corporation.Cisco Firepower 4100 Series is a 4100 series firewall appliance.Cisco FXOS Software is a set of firewall software running in Cisco security appliances.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco MDS 9000...

CVE-2019-1726

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...

Cisco FXOS and NX-OS Command Injection Vulnerabilities

Cisco FXOS is the Firepower extensible operating system.Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A command injection vulnerability exists in the CLI of Cisco FXOS and NX-OS. The...

PT-2019-2448 · Cisco +1 · Cisco Nx-Os +3

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software versions affected versions not specified Cisco NX-OS Software versions affected versions not specified Description: The issue is related to insufficient validation of input data in the command-line interface CLI of Cisco...

Cisco FXOS and NX-OS Command Injection Vulnerability (CNVD-2019-14617)

Cisco FXOS is the Firepower extensible operating system.Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A command injection vulnerability exists in the CLI of Cisco FXOS and NX-OS. The...

Cisco NX-OS Buffer Overflow and Command Injection Vulnerabilities

Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A buffer overflow and command injection vulnerability exists in the implementation of certain CLI commands in Cisco NX-OS. The vulnerabili...

Cisco FXOS and NX-OS Command Injection Vulnerability (CNVD-2019-14616)

Cisco FXOS is the Firepower extensible operating system.Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A command injection vulnerability exists in the CLI of Cisco FXOS and NX-OS. The...

PT-2019-15250 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected...

The vulnerability of the NX-API network operating system function in Cisco NX-OS devices allows a hacker to execute arbitrary code with superuser privileges.

The vulnerability of the NX-API network operating system function in Cisco NX-OS devices is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code with superuser privileges...

The vulnerability in the Bash shell implementation of the Cisco NX-OS network operating system allows a hacker to elevate their privileges to the root level.

The vulnerability of the Bash shell implementation in the Cisco NX-OS network operating system devices relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to root by entering a specially created command in the Bash command...

The vulnerability of the control interface for Cisco NX-OS network operating system routers allows attackers to escalate their privileges.

The vulnerability of the control interface for Cisco NX-OS network operating system routers relates to authentication process errors. Exploiting this vulnerability can allow attackers to increase their privileges...

Cisco NX-OS Software Privilege License and Access Control Vulnerability

Cisco Nexus 9500 R-Series Line Cards and Fabric Modules and so on are the products of Cisco Corporation.Cisco Nexus 9500 R-Series Line Cards and Fabric Modules is a 9500R Series Line Cards Modules.Cisco Nexus 3000 Series Switches is a 3000 Series Switch.Cisco Nexus 3500 Platform Switches is a 350...

Cisco IOS and IOS XE TCP Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the TCP socket code in Cisco IOS and IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service device reload...

CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability

Cisco IOS XE Software is the operating system for Cisco network appliances, and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec is a security appliance from cisco. A denial of service vulnerability exists in Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance...

Denial of Service Vulnerability in the FXOS Software and NX-OS Software Fabric Services Component of Multiple Cisco Products (CNVD-2018-14571)

Cisco Firepower 4100 Series Next-Generation Firewalls are all products of Cisco Corporation.Cisco Firepower 4100 Series Next-Generation Firewalls is a 4100 series firewall device. Cisco Firepower 4100 Series Next-Generation Firewalls are 4100 series firewalls.MDS 9000 Series Multilayer Switches a...

CVE-2018-0308

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability exists because the affected software insufficiently...

CVE-2018-0330

A vulnerability in the NX-API management application programming interface API in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain...

Cisco IOS XE Software CLI Parser Command Injection Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. A command injection vulnerability exists in the CLI parser in Cisco IOS XE Software, which arises from the program's failure to adequately filter command...

Lenovo Patches Networking OS Vulnerability Dating Back to 2004

Lenovo patched a flaw in its networking operating system dating back to 2004 that allowed attackers to perform an authentication bypass attack via a mechanism called “HP Backdoor.” If exploited, an attacker could gain admin-level access on affected switches, Lenovo said. The vulnerability is rate...