397 matches found
Cisco NX-OS Software Cisco Fabric Services Denial of Service Vulnerability
According to its self-reported version, the Cisco NX-OS Software is affected by a denial of service DoS vulnerability. It exists in Cisco fabric services due to insufficient validation of Cisco fabric service packets. An unauthenticated, remote attacker can exploit this issue, via sending a craft...
Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability
A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...
CVE-2019-1780
CVE-2019-1780 is a Cisco FXOS/NX-OS command-injection vulnerability in the CLI caused by insufficient validation of arguments passed to certain CLI commands. An authenticated local attacker with administrator credentials can exploit this to execute arbitrary commands on the underlying operating s...
Design/Logic Flaw
A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly...
CVE-2019-1768
A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with...
CVE-2019-1768
Cisco NX-OS Software contains a vulnerability (CVE-2019-1768) arising from insufficient validation of arguments passed to a specific CLI command, enabling an authenticated local attacker with administrator credentials to cause a buffer overflow or command injection. The issue affects the way cert...
CVE-2019-1858
Summary (CVE-2019-1858) : A vulnerability in the SNMP input packet processor on Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, leading to repeated restarts and a DoS condition. Root cause is imprope...
CVE-2019-1811
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...
CVE-2019-1809
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...
CVE-2019-1808
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...
Design/Logic Flaw
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...
CVE-2019-1811
Cisco NX-OS has a local, authenticated vulnerability in the Image Signature Verification feature that can allow an administrator to install an unsigned software image due to signatures not being properly verified during CLI command execution. Affected product: Cisco NX-OS Software; the issue stem...
CVE-2019-1811 Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...
CVE-2019-1812
Cisco NX-OS CLI Command Software Image Signature Verification (CVE-2019-1812) affects Cisco NX-OS Software, where the Image Signature Verification feature fails to properly verify digital signatures during CLI command execution. This can allow an authenticated, local attacker with administrator-l...
CVE-2019-1813
CVE-2019-1813 affects Cisco NX-OS Software and concerns the Image Signature Verification feature. The issue arises because software digital signatures are not properly verified during CLI command execution, enabling an authenticated, local attacker with administrator-level credentials to install ...
CVE-2019-1813 Cisco NX-OS CLI Command Software Image Signature Verification Vulnerability
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...
CVE-2019-1808 Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...
CVE-2019-1808
Cisco NX-OS Software’s Image Signature Verification feature is vulnerable to an in-vehicle issue where an authenticated, local attacker with administrator-level credentials can load an unsigned patch image and boot a malicious software patch. The root cause is improper verification of digital sig...
CVE-2019-1791
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of...
CVE-2019-1790
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to...