CVE-2024-20411

Cisco NX-OS Software contains a Bash shell-related vulnerability that allows an authenticated, local attacker with Bash-shell access to execute arbitrary code as root due to insufficient command restrictions. Public sources (including Cisco Security Advisory Cisco NX-OS Bash Arbitrary Code Execut...

CVE-2024-20413 Cisco NX-OS Bash Privilege Escalation Vulnerability

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing application arguments from the...

CVE-2024-20413 Cisco NX-OS Bash Privilege Escalation Vulnerability

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing application arguments from the...

CVE-2024-20413

CVE-2024-20413 affects Cisco NX-OS Software. A vulnerability arises from insufficient security restrictions when executing application arguments from the Bash shell, allowing an authenticated, local attacker with privileges to access Bash to elevate to network-admin on an affected device. The res...

Cisco NX-OS Software Python Sandbox Escape Vulnerabilities

Multiple vulnerabilities in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. These vulnerabilities are due to insufficient...

Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability

A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of specific fields in a DHCPv6 RELAY-REPLY message. An attacker could...

Cisco NX-OS Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments for a specific CLI command. An...

Cisco NX-OS Software Bash Arbitrary Code Execution and Privilege Escalation Vulnerabilities

Multiple vulnerabilities in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code with root privileges or elevate privileges to network-admin on an affected device. For more information about these vulnerabilities, see...

PT-2024-6116 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system...

PT-2024-6117 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: The issue is related to insufficient security restrictions when executing commands from the Bash shell, allowing an authenticated, local attacker with privileges to access the...

PT-2024-6149 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the Python interpreter of Cisco NX-OS Software, allowing an authenticated, low-privileged, local...

PT-2024-5972 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software versions up to 10.21q Description: A vulnerability in the Python interpreter could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operati...

PT-2024-5806 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the DHCPv6 relay agent could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This is due to...

Siemens NX Out-of-Bounds Read Vulnerability

NX is an integrated toolset that helps develop design, simulation and manufacturing solutions by supporting all aspects of product development, enabling designers to optimize shapes for multidisciplinary design. An out-of-bounds read vulnerability exists in Siemens NX, which can be exploited by a...

CVE-2024-41908

A vulnerability has been identified in NX All versions V2406.3000. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process...

CVE-2024-41908

Siemens NX is affected: all versions prior to V2406.3000 have an out-of-bounds read while parsing crafted PRT files. This can crash the application or allow code execution in the current process. The vulnerability is mitigated by updating to V2406.3000 or later and by not opening untrusted PRT fi...

CVE-2024-41908

A vulnerability has been identified in NX All versions V2406.3000. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process...

CVE-2024-41908

A vulnerability has been identified in NX All versions V2406.3000. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process...

Siemens NX

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2024-29626 · Siemens · Siemens Nx

Name of the Vulnerable Software and Affected Versions: Siemens NX versions prior to V2406.3000 Description: A vulnerability has been identified in the affected applications, which contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker ...