Cisco NX-OS Directory Traversal (cisco-sa-20190501-fabric-traversal)

The version of Cisco NX-OS installed on the remote host is affected by a directory traversal vulnerability in its system shell due to incorrect symbolic link verification of directory paths. An authenticated, local attacker can exploit this, to overwrite system files whose access should be...

Cisco NX-OS Software CLI to Internal Service Bypass (cisco-sa-20190515-nxos-cli-bypass)

According to its self-reported version, Cisco Unified Computing System Managed is affected by following vulnerability - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such...

CVE-2019-20001

An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges...

CVE-2019-20001

An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges...

Code injection

An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges...

CVE-2019-20001

An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges...

CVE-2019-20001

Technical details about CVE-2019-20001 are not publicly provided in the supplied documents; no affected products, versions, or remediation details are disclosed. Monitor for updates.

Cisco NX-OS Software CLI Arbitrary Command Injection (cisco-sa-20180620-nx-os-cli-injection)

A command injection vulnerability exists in the CLI of Cisco NX-OS Software due to insufficient input validation of command arguments. An authenticated, local attacker can exploit this, via a vulnerable CLI command to execute arbitrary commands. Cisco BIDs and Cisco Security Advisory for more...

Cisco NX-OS Software Unauthorized Administrator Account (cisco-sa-20180620-nxosadmin)

According to its self-reported version, a improper file handling vulnerability exists in Cisco NX-OS Software. Therefore, an authenticated, local attacker can exploit this via CLI commands to create a unathorized account with administrator privilages that does not require a password for...

Cisco NX-OS Software Cisco Fabric Services Arbitrary Code Execution (cisco-sa-20180620-fxnxos-ace)

A arbitrary code execution vulnerability exists in Cisco Fabric Services NXOS software due to insufficient validation of packet headers. An unauthenticated, remote attacker can exploit this, via crafted packets, to execute arbitrary code. Please see the included Cisco BIDs and Cisco Security...

Cisco NX-OS Software Internet Group Management Protocol Snooping RCE and DoS (cisco-sa-20180620-nxosigmp)

According to its self-reported version, Cisco NX-OS Software is affected by a due to a buffer overflow condition in the IGMP Snooping subsystem. An attacker could exploit this vulnerability by sending crafted IGMP packets to an affected system. An exploit could allow the attacker to execute...

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution (cisco-sa-20180620-fxnxos-dos)

According to its self-reported version, Cisco FXOS Software is affected by a vulnerability in the Cisco Discovery Protocol due to insufficiently validated packet headers. An unauthenticated, adjacent attacker can exploit this, via a crafted Cisco Discovery Protocol packet, to execute arbitrary...

Cisco NX-OS Software CLI Arbitrary Command Execution (cisco-sa-20180620-nx-os-cli-execution)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability exists in CLI parser due to insufficient input validation of command arguments. An authenticated, local attacker can exploit this, via injecting malicious command arguments, to execute...

Cisco NX-OS Software Image Signature Verification (cisco-sa-20190306-nxos-sig-verif)

According to its self-reported version, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode is affected by a denial of service DoS vulnerability exists in Fibre Channel over Ethernet N-port Virtualization due to incorrect processing of FCoE packets. An unauthenticated, adjacent...

Cisco FXOS, NX-OS, and UCS Manager Software Cisco Discovery Protocol DoS (cisco-sa-20180620-nxos-cdp)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability exists in Cisco Discovery Protocol due to failure to properly validate certain fields within a Cisco Discovery Protocol message. An unauthenticated, adjacent attacker can exploit this...

Cisco FXOS, NX-OS, and UCS Manager Software Cisco Discovery Protocol DoS (cisco-sa-20180620-nxos-cdp)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability exists in Cisco Discovery Protocol due to failure to properly validate certain fields within a Cisco Discovery Protocol message. An unauthenticated, adjacent attacker can exploit this...

Cisco NX-OS Software Border Gateway Protocol DoS (cisco-sa-20180620-nxosbgp)

According to its self-reported version, Cisco NX-OS Software is affected by a distributed denial of service DDoS vulnerability in the Border Gateway Protocol due to incompleteinput validation of the BGP update messages. An unauthenticated, remote attacker can exploit this to cause a denial of...

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution (cisco-sa-20180620-fxnxos-dos)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Cisco Discovery Protocol due to insufficiently validated packet headers. An unauthenticated, adjacent attacker can exploit this, via a crafted Cisco Discovery Protocol packet, to execute arbitrary...

Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV DoS Vulnerability (cisco-sa-20190306-nxos-npv-dos)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability exists in Fibre Channel over Ethernet N-port Virtualization due to incorrect processing of FCoE packets. An unauthenticated, adjacent attacker can exploit this issue, via sending a...

Cisco NX-OS Software One Platform Kit Remote Code Execution Vulnerability (cisco-sa-ios-nxos-onepk-rce-6Hhyt4dC)

According to its self-reported version, Cisco NXOS is affected by a remote code execution vulnerability. Therefore there exists in Cisco One Platform Kit due to a vulnerability in the Topology Discovery Service. An unauthenticated, adjacent attacker can exploit this to bypass authentication and...