Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. The vulnerability exists due to insufficient input sanitization of...

Cisco Nexus 9000 Application Policy Infrastructure Controller Unauthorized Access Vulnerability

The Cisco Application Policy Infrastructure Controller APIC on Nexus 9000 devices is a Cisco controller that runs on 9000 series switch devices to automate the management of application-centric infrastructure ACI. It supports access to all ACI information, optimizing the application lifecycle,...

CVE-2015-4225

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

Design/Logic Flaw

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

CVE-2015-4225

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

CVE-2015-4225

Cisco APIC on Nexus 9000 devices (versions 1.0(1.110a) and 1.0(1e)) contains a vulnerability where RBAC health scoring is not properly implemented, allowing remote authenticated users to read sensitive information via unspecified vectors (Bug CSCuq77485). The issue stems from RBAC protection arou...

Cisco Nexus 9000 NX-OS Information Disclosure Vulnerability

Cisco NX-OS is an operating system that runs in the Nexus 9000 series devices. A security vulnerability in the Cisco NX-OS decryption mechanism on Cisco Nexus 9000 devices allows a remote attacker to obtain plaintext passwords...

CVE-2015-4213

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

Command injection

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

CVE-2015-4213

CVE-2015-4213 affects Cisco NX-OS 1.1(1g) on Nexus 9000 series devices, enabling remote authenticated users to discover cleartext passwords via the decryption mechanism (Bug CSCuu84391). Root cause is the decryption implementation, which allows exposure of plaintext credentials. The issue is miti...

Cisco Nexus 9000 Series Software Password Exposure Vulnerability

A vulnerability in Cisco Nexus 9000 Series Software could allow an authenticated, remote attacker to expose passwords in plain text format. The vulnerability is due to older versions of the affected software retaining the ability to decrypt passwords. An attacker could exploit this vulnerability ...

Cisco NX-OS LLDP Handling Denial of Service Vulnerability

Cisco NX-OS software is a data center-class operating system that embodies modular design, sustainability, and maintainability. A security vulnerability in the processing of LLDP messages by Cisco NX-OS allows a remote user on the local network to send specially crafted LLDP messages to an...

Code injection

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

CVE-2015-4197

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

CVE-2015-4197

CVE-2015-4197 affects Cisco NX-OS Software (5.2(5)) on Nexus 7000 devices. It is a LLDP processing vulnerability where parsing a crafted malformed LLDP packet can crash the target device, exploitable by an unauthenticated, adjacent attacker over the local network. Root cause is an error in LLDP p...

CVE-2015-4197

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

Non-Nexus Devices and the Android Security Rewards Program

Google’s decision to limit its Android Security Rewards program to newer Nexus devices clearly puts the Google phones on the top tier of secure mobile devices. It also could ultimately have the effect of putting non-Nexus devices in the line of fire. For now, limiting the rewards program to Nexus...

Cisco Nexus and MDS NX-OS Denial of Service Vulnerabilities

Cisco NX-OS on Nexus 4000 devices, etc. and MDS 9000 devices is the United States Cisco Cisco company's set of operating system running in the Nexus 4000 and other series of switch equipment and MDS 9000 series of fiber optic switch equipment. A security vulnerability exists in the implementation...

Google Launches Android Security Rewards For Nexus Devices

Google today announced that it has expanded the scope of its vulnerability rewards program to include the latest versions of its Nexus mobile devices, dangling thousands of dollars in front of researchers willing to hunt not only for vulnerabilities but also develop bypasses for native Android...

CVE-2015-0775

The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...