Cisco NX-OS Software Denial of Service Vulnerability (CNVD-2016-01459)

Cisco NX-OS is a data center-class operating system. A security vulnerability exists in the SNMP input packet processor in the Cisco Nexus 5500/5600 platform switches, Cisco Nexus 6000 series switches, which can be exploited by an unauthenticated, remote attacker to cause an unintentional restart...

Cisco Nexus 3000/3500 Switch Default Credentials Vulnerability

Cisco Nexus is Cisco's family of network switches designed for data centers. A security vulnerability exists in NX-OS on Cisco Nexus 3000 series switches and Cisco Nexus 3500 platform switches, which originates from a user account that is created during installation and cannot be deleted or...

CVE-2015-0718

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

Code injection

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

Code injection

Cisco NX-OS 7.11N11 on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service SNMP application restart via a crafted packet, aka Bug ID CSCut84645...

CVE-2015-0718

Cisco NX-OS v4.0–6.1 on Nexus 1000V platforms (3000/4000/5000/6000/7000) and UCS may be remotely exploitable via crafted TCP packets while a TIME_WAIT state exists, causing a denial of service (TCP stack reload). Root cause: improper handling of certain TCP closing sequences in TIME_WAIT. Impact:...

CVE-2015-0718

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

CVE-2015-6260

Cisco NX-OS 7.11N11 on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service SNMP application restart via a crafted packet, aka Bug ID CSCut84645...

Cisco Fixes Another Default, Static Password Flaw

Cisco Systems issued a “critical” patch on Wednesday for its Nexus 3000 and 3500 series switches that allow remote attackers to access default account and static password information on affected hardware. The vulnerability could allow an unauthenticated user to log in to the affected system with...

CVE-2016-1329

Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...

Hardcoded credentials

Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...

CVE-2016-1329

Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...

CVE-2016-1329

Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...

CVE-2016-1329

CVE-2016-1329 affects Cisco NX-OS on Nexus 3000 (6.0(2)U6(1)–6.0(2)U6(5)) and Nexus 3500 (6.0(2)A6(1)–6.0(2)A6(5), 6.0(2)A7(1)). The root cause is hardcoded/default credentials present in an account created at installation, allowing unauthenticated remote attackers to obtain root privileges via T...

Cisco Application Policy Infrastructure Controller and Nexus 9000 ACI Mode Switches Security Bypass Vulnerability

Cisco Application Policy Infrastructure Controllers and Cisco Nexus 9000 Series ACI Mode Switches are both products of the American company Cisco. The former is a controller that automates the management of application-centric infrastructure ACI. The latter is an application-centric infrastructur...

Cisco Nexus 9000 Application Centric Infrastructure Mode Denial of Service Vulnerability

The Cisco Nexus 9000 Application Centric Infrastructure ACI Mode is a Cisco 9000 Series switch for Application Centric Infrastructure ACI applications. A security vulnerability in Cisco Nexus 9000 Series ACI Mode Switches using software versions prior to 11.01c can be exploited by a remote attack...

Cisco Nexus 3000 and 3500 Insecure Default Telnet Credentials (cisco-sa-20160302-n3k)

The remote Cisco Nexus device has a known set of hardcoded default user credentials. An unauthenticated, remote attacker can exploit this to authenticate remotely to the device via Telnet with the privileges of the root user with bash shell access. TRUSTED...

Cisco NX-OS Software SNMP Packet Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco��Nexus 5500 Platform Switches, Cisco��Nexus 5600 Platform Switches, and Cisco��Nexus 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP...

Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability

A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. The vulnerability is due to a user accoun...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected device. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...