CVE-2009-0627

The CVE-2009-0627 entry concerns Cisco NX-OS on Nexus 5000 platforms (before 4.0(1a)N2(1)). It describes an unspecified vulnerability that lets remote attackers crash the device via a sequence of TCP packets related to TCP state manipulation, possibly linked to CVE-2008-4609 (sockstress). The con...

CVE-2011-2581

Cisco Nexus NX-OS ACL bypass (CVE-2011-2581) affects Nexus 5000 and 3000 series: placing a remark before a deny in an ACL can allow bypass of access restrictions, enabling remote packet flow in opportunistic scenarios. Root cause: improper handling of comments when paired with deny statements. Af...

CVE-2013-1178

Cisco NX-OS CDP-related vulnerability (CVE-2013-1178) affects Nexus 7000/5000/5500/4000/3000, Nexus 1000V, MDS 9000, UCS 6100/6200, and CGR 1000. Multiple buffer-overflow flaws in the Cisco Discovery Protocol allow remote attackers to execute arbitrary code via malformed CDP packets. Impact is de...

CVE-2012-0352

Cisco NX-OS DoS vulnerability CVE-2012-0352 affects Nexus 1000v (4.2.x before 4.2(1)SV1(5.1)), Nexus 5000 (4.x/5.0.x before 5.0(2)N1(1)) and Nexus 7000 (4.2.x before 4.2.8, 5.0.x before 5.0.5, 5.1.x before 5.1.1). The issue allows remote attackers to crash the netstack process and reload the devi...

CVE-2013-1192

CVE-2013-1192 affects Cisco Device Manager (Java-based JNLP launcher) for Cisco MDS 9000 family (pre-5.2.8) and Cisco Nexus 5000. The issue enables remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file. Root cause: JAR-based code executi...

CVE-2014-3261

CVE-2014-3261 details a buffer overflow in Cisco NX-OS Smart Call Home, exploitable via crafted SMTP replies to remote SMTP servers. Affected platforms include Cisco UCS NX-OS on Fabric Interconnects, Nexus 3000/4000/5000/7000, and CGOS CG4 (with specific version ranges provided in the Cisco and ...

CVE-2014-3341

The CVE-2014-3341 issue affects Cisco NX-OS Software SNMP module on Nexus 5000/6000 and versions up to 7.0(3)N1(1). The vulnerability arises because the SNMP service returns different error messages for invalid requests depending on whether the VLAN ID exists, enabling remote attackers to enumera...

CVE-2012-1357

The CVE-2012-1357 issue affects Cisco Nexus 5000 series switches running NX-OS 5.0 and 5.1, where the igmp_snoop_orib_fill_source_update function in the IGMP process can be abused by remote attackers via IGMP packets to trigger a denial of service (device reload). This is caused by a vulnerabilit...