CVE-2023-20050

CVE-2023-20050 affects Cisco NX-OS Software CLI, where insufficient validation of CLI arguments allows an authenticated, local attacker to inject commands and run arbitrary OS commands with the privileges of the logged-in user. Multiple connected sources (Cisco advisory, Nessus/NES plugins, and C...

Cisco NX-OS Software 操作系统命令注入漏洞

Cisco NX-OS Software is a suite of data center-grade operating system software used by Cisco's switches in the United States. A security vulnerability exists in Cisco NX-OS Software that stems from insufficient validation of parameters passed to specific CLI commands. An attacker exploiting this...

Cisco NX-OS Software CLI Comm Injection (cisco-sa-nxos-cli-cmdinject-euQVK9u)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability...

Cisco NX-OS Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...

Cisco NX-OS Software SSH X.509v3 Certificate Authentication with Unsupported Remote Authorization Method Privilege Escalation Issues

For certain products that are running Cisco NX-OS Software and are configured for SSH authentication with an X.509 version 3 X.509v3 certificate, two remote authorization methods are unsupported and could allow for privilege escalation: TACACS+ and certain configurations of Lightweight Directory...

PT-2023-2013 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: The issue is due to insufficient validation of arguments passed to specific CLI commands, allowing an authenticated, local attacker to execute arbitrary commands on the...

SUSE CVE-2011-2916

qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson AGX Orin Series - January 2023

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, and Jetson AGX Orin series in the NVIDIA JetPack™ software development kit SDK. The update addresses security issues that may lead to escalation of privileges, compromised data integrity and...

Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.

Summary Public disclosed OpenSSL vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches. The vulnerability has been addressed and can be resolved by applying the NX-OS code level listed below. Vulnerability Details CVEID:CVE-2021-3712 DESCRIPTION: OpenSSL could allow a remo...

Multiple Old Vulnerabilities actively exploiting in Cisco Products

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Several security old vulnerabilities actively exploiting in Cisco IOS, NX-OS, and HyperFlex software, some of which can be exploited for authentication bypassing to gain full control of the impact...

Cisco NX-OS Software system login block-for DoS (cisco-sa-nxos-login-blockfor-RwjGVEcu)

A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of service DoS condition on an affected device. The vulnerability is due to a log...

Omron NJ/NX-series Machine Automation Controllers

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely, public exploits are available Vendor: Omron Equipment: NJ/NX-series Machine Automation Controllers Vulnerability: Active Debug Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain...

GSD-2022-1005371 KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33629 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.19.2 Description: A potential security issue exists in the KVM x86/mmu component, related to the treatment of NX as a valid SPTE bit for NPT. The actual impact and attack plausibility have not yet been proven...

Malicious code in faust-nx-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a13a7f17aa394d9547f5e79e53347c4a9c43f05d6e49941d23526b430482b69a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2970 Malicious code in faust-nx-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a13a7f17aa394d9547f5e79e53347c4a9c43f05d6e49941d23526b430482b69a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Windows shellcode stage, Reverse Ordinal TCP Stager (No NX or Win7)

Custom shellcode stage. Connect back to the attacker Module Options msf use payload/windows/custom/reverseordtcp msf payloadreverseordtcp show actions ...actions... msf payloadreverseordtcp set ACTION msf payloadreverseordtcp show options ...show and set options... msf payloadreverseordtcp run Th...

Windows shellcode stage, Bind TCP Stager (No NX or Win7)

Custom shellcode stage. Listen for a connection No NX Module Options msf use payload/windows/custom/bindnonxtcp msf payloadbindnonxtcp show actions ...actions... msf payloadbindnonxtcp set ACTION msf payloadbindnonxtcp show options ...show and set options... msf payloadbindnonxtcp run This module...

Windows shellcode stage, Reverse TCP Stager (No NX or Win7)

Custom shellcode stage. Connect back to the attacker No NX Module Options msf use payload/windows/custom/reversenonxtcp msf payloadreversenonxtcp show actions ...actions... msf payloadreversenonxtcp set ACTION msf payloadreversenonxtcp show options ...show and set options... msf...

Powershell Exec, Windows shellcode stage, Bind TCP Stager (No NX or Win7)

Execute an x86 payload from a command via PowerShell. Custom shellcode stage. Listen for a connection No NX Module Options msf use payload/cmd/windows/powershell/custom/bindnonxtcp msf payloadbindnonxtcp show actions ...actions... msf payloadbindnonxtcp set ACTION msf payloadbindnonxtcp show...