3413 matches found
CVE-2012-4075: Improper Neutralization of Special Elements used in an OS Command
Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...
PT-2013-1638
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue concerns the BGP implementation, which does not properly filter AS paths. This allows remote attackers to cause a denial of service by resetting and resyncing the BGP service vi...
PT-2013-1616
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters. This is due to poor processing of parameters tha...
CVE-2012-4098: Improper Input Validation
The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13055...
PT-2013-1630
Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions affected versions not specified Description A vulnerability exists in the management interface of Cisco NX-OS, allowing remote authenticated users to obtain sensitive configuration-file information. This issue is due to...
CVE-2012-4090: Undefined Security Weakness
The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089...
CVE-2013-1121
The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...
Code injection
The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...
CVE-2013-1121
The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...
CVE-2013-1121
The CVE-2013-1121 issue affects Cisco NX-OS BGP: the regex engine handling complex inbound route expressions can be triggered by crafted AS path sets, causing a remote, unauthenticated attacker to reload the device (DoS). Public sources (Cisco advisory) confirm the vulnerability and that software...
CVE-2013-1121: Undefined Security Weakness
The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...
Cisco NX-OS Software BGP Regex Vulnerability
A vulnerability in the Border Gateway Protocol BGP code of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to an issue with the regex engine used when processing complex regular expressions. An attacker could...
PT-2013-2893
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the regex engine in the BGP implementation, which can cause a denial of service device reload when a complex regular expression is configured for inbound routes. A...
CVE-2013-5496
Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...
CVE-2013-5496
Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...
CVE-2013-5496
CVE-2013-5496 affects Cisco NX-OS Open Network Environment Platform (ONEP). A vulnerability due to insufficient pointer validation allows an authenticated, remote attacker to cause a network element to reload (DoS) by sending crafted packets. The issue, tracked as CSCui51551, is documented in Cis...
CVE-2013-5496: Improper Input Validation
Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...
PT-2013-5580
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in a network-element reload, by sending a crafted packet to an affected network element. This is due to...
OSPF LSA Manipulation Vulnerability in Cisco NX-OS (cisco-sa-20130801-lsaospf)
The remote Cisco NX-OS device is affected by a vulnerability involving the Open Shortest Path First OSPF routing protocol Link State Advertisement LSA database. By injecting specially crafted OSPF packets, an unauthenticated attacker could manipulate or disrupt the flow of network traffic through...
