2689 matches found
Cisco NX-OS Improper Input Validation (CVE-2013-6982)
The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174. Thi...
Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2012-4141)
Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the file name parameter, aka Bug IDs CSCua71557 and CSCua71551. This plugin only works with Tenable.ot. Please visit...
Cisco NX-OS Uncontrolled Resource Consumption (CVE-2018-0090)
A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...
Cisco NX-OS Command Injection (CVE-2017-12330)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...
Cisco NX-OS Resource Management Errors (CVE-2015-6308)
Cisco NX-OS 6.02U60.46 on N3K devices allows remote authenticated users to cause a denial of service temporary SNMP outage via an SNMP request for an OID that does not exist, aka Bug ID CSCuw36684. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...
Cisco Unified Computing System Unrestricted Upload of File with Dangerous Type (CVE-2017-12332)
A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations. The vulnerability is due to insufficient restrictions in the patch installation process. An attacker could exploit this vulnerability by installin...
Cisco NX-OS Improper Input Validation (CVE-2012-4091)
The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service engine restart via a malformed 1 RIPv4 or 2 RIPv6 message, aka Bug ID CSCtj73415. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Cisco NX-OS Improper Input Validation (CVE-2017-12336)
A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient input validati...
Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 Denial of Service (CVE-2012-2469)
Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability HA policy is configured for Reset, allows remote attackers to cause a denial of service device reset via a malformed Cisco Discovery Protocol CDP packet, aka Bug IDs CSCtk34535 and CSCtk19132. This plugin...
Cisco NX-OS Improper Input Validation (CVE-2013-5496)
Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Cisco NX-OS OS Command Injection (CVE-2012-4075)
Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Cisco NX-OS Resource Management Errors (CVE-2012-0352)
Cisco NX-OS 4.2.x before 4.2%281%29SV1%285.1%29 on Nexus 1000v series switches; 4.x and 5.0.x before 5.0%282%29N1%281%29 on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of...
Cisco NX-OS Resource Management Errors (CVE-2012-6396)
Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service memory consumption via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID...
Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2011-2569)
Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188. This...
Cisco NX-OS Improper Authentication (CVE-2014-3295)
The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309. This plugin only works with Tenable.ot. Please visit...
Cisco NX-OS Command Injection (CVE-2017-12335)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command...
Cisco NX-OS 5.2 and 6.1 Denial of Service (CVE-2012-3051)
Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service process crash or packet loss via a large number of ARP packets, aka Bug ID CSCtr44822. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...
Cisco NX-OS Improper Input Validation (CVE-2012-4122)
The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...
Cisco NX-OS Command Injection (CVE-2017-12339)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...
Cisco NX-OS Improper Input Validation (CVE-2014-0677)
The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851. This plugin only works with Tenable.ot. Please visit...