Cisco NX-OS Elevation of Privilege Vulnerability

Cisco NX-OS is a data center-class operating system from Cisco that embodies modular design, perpetuity, and maintainability. An elevation of privilege vulnerability exists in Cisco NX-OS on the Cisco Nexus 2000 Series Fabric Extender that allows local users to gain privileges via unspecified...

CVE-2016-1341

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...

Default credentials

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...

CVE-2016-1341

CVE-2016-1341 affects Cisco NX-OS on Nexus 2000 Series Fabric Extender devices. A blank root password allows local users to gain root privileges via unspecified vectors (Bug CSCur22079). Affected software versions include NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1). The vulnerability is local...

CVE-2016-1341

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...

Cisco Nexus 2000 Series Fabric Extender Software Default Credential Vulnerability

A vulnerability in the Cisco Nexus 2000 Series Fabric Extender could allow an unauthenticated, local attacker to log in to the system shell with root user privileges. The vulnerability is due to a missing password for the root user account on the affected system. This account is created at...

Cisco Nexus 9000 Series APIC Access Control Vulnerability (CSCut12998)

The remote Cisco Nexus 9000 Series device is affected by an access control vulnerability in the Cisco Application Policy Infrastructure Controller APIC due to a flaw in the eligibility logic of the role-based access control RBAC code. An authenticated, remote attacker can exploit this, via...

CVE-2016-1302

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...

CVE-2016-1302

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...

Code injection

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...

CVE-2015-6398

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

Design/Logic Flaw

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

CVE-2016-1302

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...

CVE-2015-6398

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

CVE-2015-6398

Cisco Nexus 9000 Series switches operating in ACI Mode with software earlier than 11.0(1c) are affected by CVE-2015-6398. The issue arises from improper handling of IPv4 ICMP packets that use the Record Route (Type 7) option, which can allow an unauthenticated remote attacker to trigger a denial-...

CVE-2016-1302

CVE-2016-1302 affects Cisco APIC devices and Nexus 9000 ACI Mode switches. A flaw in the RBAC eligibility logic allows remote authenticated users to bypass intended privileges by sending crafted REST requests, enabling unauthorized configuration changes (Bug CSCut12998). Affected versions: APIC s...

Maru OS — Android ROM that Turns into Debian Linux When Connected to a PC

Good News for Linux Techno Freaks! Do you usually mess with your Android smartphone by trying out the continual ins and outs of various apps and custom ROMs? Then this news would be a perfect pick for you! What If, you can effectively carry a Linux computer in your pocket? Hereby introducing a ne...

Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability

A vulnerability in the ICMP implementation in the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch could allow an unauthenticated, remote attacker to cause the switch to reload, resulting in a denial of service DoS condition. The vulnerability is due to improper handling...

February 2016 Android Nexus Security Bulletin

Google today patched Nexus devices in an over-the-air update against a critical vulnerability that could be exploited by an attacker on the same Wi-Fi network. The patch addresses multiple vulnerabilities in the Broadcom Wi-Fi driver that could be abused to allow for remote code execution. The...

Nexus Security Bulletin - February 2016Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49G or later and Android M with Security Patch Level o...