PT-2019-1568

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 7.03I74 Cisco NX-OS Software versions prior to 7.03F35 Description A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive da...

PT-2019-1571

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 8.11 on MDS 9000 Series Multilayer Switches Cisco NX-OS Software versions prior to 7.03I48 and 7.03I71 on Nexus 3000 Series Switches Cisco NX-OS Software versions prior to 6.02A88 on Nexus 3500 Platform...

Command injection

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command-injection exploit. The vulnerability is due to incorrect input validation of user-supplied...

CVE-2018-0313

CVE-2018-0313 involves a vulnerability in Cisco NX-OS NX-API where improper input validation allows an authenticated, remote attacker to send malicious HTTP/HTTPS packets to the management interface and execute arbitrary root commands. Affected are multiple Cisco platforms running NX-OS in standa...

CVE-2018-0313: Improper Input Validation

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command-injection exploit. The vulnerability is due to incorrect input validation of user-supplied...

Multiple Cisco Products NX-OS Software NX-API management API Elevation of Privilege Vulnerability

Cisco MDS 9000 Series Multilayer Switches and so on are different series of switch equipment from Cisco, U.S.A. NX-OS Software is a set of data center-grade operating system software used by the switches running in it.NX-API management API is one of the NX-API management API is one of the...

Design/Logic Flaw

A vulnerability in the NX-API management application programming interface API in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain...

CVE-2018-0330

A vulnerability in the NX-API management application programming interface API in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain...

Buffer overflow

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

CVE-2018-0330

A vulnerability in the NX-API management application programming interface API in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain...

CVE-2018-0330

The CVE-2018-0330 issue concerns the NX-API management API in Cisco NX-OS Software. Affected devices include Cisco MDS 9000, Nexus 2000/3000/3500/5500/5600/6000/7000/7700 series, and NX-OS in standalone mode. Root cause: improper validation of parameters within NX-API requests, enabling an authen...

CVE-2018-0301

The CVE-2018-0301 entry describes a vulnerability in Cisco NX-OS NX-API where an unauthenticated remote attacker can send crafted HTTP/HTTPS packets to the management interface, triggering a buffer overflow due to improper input validation in the NX-API authentication module. This could allow arb...

Cisco NX-OS Software NX-API Arbitrary Command Execution Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command-injection exploit. The vulnerability is due to incorrect input validation of user-supplied...

PT-2018-8738

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected syste...

CVE-2018-0330: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the NX-API management application programming interface API in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain...

PT-2018-8744

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the NX-API feature could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a...

PT-2018-8759

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A vulnerability in the NX-API management application programming interface API could allow an authenticated, remote attacker to execute commands with elevated privileges. The iss...

CVE-2018-0301: Improper Input Validation

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...