CVE-2009-0627

The CVE-2009-0627 entry concerns Cisco NX-OS on Nexus 5000 platforms (before 4.0(1a)N2(1)). It describes an unspecified vulnerability that lets remote attackers crash the device via a sequence of TCP packets related to TCP state manipulation, possibly linked to CVE-2008-4609 (sockstress). The con...

CVE-2012-4090

CVE-2012-4090 affects Cisco NX-OS Software on Nexus 7000 devices. The vulnerability arises from improper sanitization of configuration files that are viewable by users with the network-operator role via the management interface. As a result, remote authenticated users could obtain sensitive confi...

CVE-2013-1122

Cisco NX-OS on Cisco Nexus 7000 switches is affected when a specific Overlay Transport Virtualization (OTV) configuration is used. The vulnerability arises from incorrect handling of crafted packets, enabling a remote attacker to cause a denial of service by forcing the M1-Series module to reload...

CVE-2014-2201

Cisco NX-OS MTS on MDS 9000 (before 6.2(7)) and Nexus 7000 (before 6.0(2)) is vulnerable to a remote denial of service via a large volume of crafted traffic, caused by a NULL pointer dereference leading to kernel panic (CVE-2014-2201). Affected devices include NX-OS-based platforms; remediation r...

CVE-2013-1191

Cisco NX-OS vulnerability (CVE-2013-1191) affects Nexus 7000 devices running 6.1 prior to 6.1(5) with local authentication and multiple VDCs enabled. An authenticated remote user can escalate privileges within an unintended VDC by sending crafted SSH key data during an SSH session to a management...

CVE-2014-0684

Cisco NX-OS 6.2(2) on Nexus 7000 switches is affected by CVE-2014-0684. The vulnerability enables a local attacker to trigger a denial-of-service condition by supplying crafted input to the sed command, due to improper input validation (Bug CSCui56136). Impact per sources is local DoS with the po...

CVE-2013-1178

Cisco NX-OS CDP-related vulnerability (CVE-2013-1178) affects Nexus 7000/5000/5500/4000/3000, Nexus 1000V, MDS 9000, UCS 6100/6200, and CGR 1000. Multiple buffer-overflow flaws in the Cisco Discovery Protocol allow remote attackers to execute arbitrary code via malformed CDP packets. Impact is de...

CVE-2013-1180

Cisco NX-OS-based products (Nexus 7000 series on 4.x/5.x before 5.2(5) and 6.x before 6.1(1); MDS 9000 on 4.x/5.x before 5.2(5)) are affected by a buffer overflow in the SNMP implementation that allows remote authenticated users to execute arbitrary code via a crafted SNMP request (Bug CSCtx54822...

CVE-2012-0352

Cisco NX-OS DoS vulnerability CVE-2012-0352 affects Nexus 1000v (4.2.x before 4.2(1)SV1(5.1)), Nexus 5000 (4.x/5.0.x before 5.0(2)N1(1)) and Nexus 7000 (4.2.x before 4.2.8, 5.0.x before 5.0.5, 5.1.x before 5.1.1). The issue allows remote attackers to crash the netstack process and reload the devi...

CVE-2012-3051

Cisco NX-OS 5.2 and 6.1 on Nexus 7000 switches are affected by CVE-2012-3051, allowing remote attackers to cause a denial of service (process crash or packet loss) by sending a large number of ARP packets (Bug ID CSCtr44822). This affects the Nexus 7000 series running those NX-OS versions. The ro...

CVE-2013-1226

CVE-2013-1226 affects Cisco NX-OS on Nexus 7000 series switches. The vulnerability is in the Ethernet frame-forwarding implementation and can be exploited remotely by sending a crafted nonstandard Ethernet frame from an adjacent network to cause a forwarding loop and resulting DoS. Affected compo...

CVE-2014-3261

CVE-2014-3261 details a buffer overflow in Cisco NX-OS Smart Call Home, exploitable via crafted SMTP replies to remote SMTP servers. Affected platforms include Cisco UCS NX-OS on Fabric Interconnects, Nexus 3000/4000/5000/7000, and CGOS CG4 (with specific version ranges provided in the Cisco and ...

CVE-2013-1179

CVE-2013-1179 is a Cisco NX-OS vulnerability affecting Nexus 7000 (4.x/5.x before 5.2(5)) and MDS 9000 (4.x/5.x before 5.2(5)) where 1) SNMP and 2) License Manager components contain buffer overflow flaws. The root cause is improper boundary/size handling in these subsystems, allowing remote auth...

CVE-2012-2469

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches is affected by CVE-2012-2469. The issue arises when the High Availability (HA) policy is configured for Reset and a malformed Cisco Discovery Protocol (CDP) packet is received, potentially causing a denial of service via device rese...

CVE-2012-6396

Cisco NX-OS on Nexus 7000 series switches has a vulnerability where improper handling of certain line-card replacements can allow remote authenticated users to cause a denial of service (memory consumption) by crafting a configuration that references interfaces that do not exist on the new card (...