CVE-2013-6982: Improper Input Validation

The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174...

Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset. The vulnerability is due to the improper processing of specifically crafted BGP update messages. An attacker...

PT-2014-3239

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description The issue is related to the BGP implementation, which does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families. This allows remo...

Cisco NX-OS Arbitrary File Access Vulnerability

A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to access arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the tar...

CVE-2012-4135

Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...

CVE-2012-4131

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...

Directory traversal

Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...

Directory traversal

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...

CVE-2012-4135

Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...

CVE-2012-4131

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...

CVE-2012-4135

Cisco NX-OS CVE-2012-4135 is a local directory-traversal vulnerability in filesys on Cisco NX-OS 6.1(2) and earlier. Exploitation requires local access and crafted arguments to the filesys delete command, allowing an authenticated attacker to access or delete arbitrary files. The issue is associa...

CVE-2012-4131

Cisco NX-OS contains a directory traversal vulnerability (CVE-2012-4131) in the tar command. A local attacker with access to the CLI can leverage crafted arguments to read arbitrary files due to improper input filtering. Affected by the vulnerability are Cisco NX-OS devices; Cisco notes that soft...

PT-2013-1658

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description A directory traversal issue exists due to improper filtering of user input in the Command Line Interface CLI of the Cisco NX-OS Software. This allows an authenticated, local attacker to...

CVE-2012-4131: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...

CVE-2012-4135: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...

Cisco NX-OS Directory Traversal Vulnerability

A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to delete arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the filesys...

PT-2013-1659

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.12 and earlier Description A directory traversal issue exists due to improper filtering of user input in the Command Line Interface CLI of the Cisco NX-OS Software. This allows an authenticated, local attacker to delete...

Cisco Nexus 4000 Series Switches IPv6 Denial of Service (CSCtd15904)

A vulnerability in the IP version 6 IPv6 packet handling routine of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to stop responding to neighbor solicitation NS requests, causing a limited denial of service DoS condition. The vulnerability is due to...

CVE-2013-6683

The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attackers to cause a denial of service NS processing outage via a series of malformed packets, aka Bug ID CSCtd15904...

CVE-2013-6683

CVE-2013-6683 affects Cisco NX-OS IPv6 neighbor-table handling. The issue arises when processing adjacencies in the IPv6 neighbor table, allowing remote, adjacent attackers to trigger a denial of service (NS processing outage) by sending a sequence of malformed IPv6 packets. Impact is described a...