CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2020-3119

Summary (CVE-2020-3119) : The vulnerability affects Cisco NX-OS Software’s Cisco Discovery Protocol (CDP) parser. It allows an unauthenticated, adjacent attacker to send a crafted CDP packet, leading to a stack overflow and potentially executing arbitrary code with administrative privileges or tr...

CVE-2019-1649

CVE-2019-1649 concerns Cisco’s Secure Boot Trust Anchor module (TAm). The flaw stems from an improper check in the FPGA/ Trust Anchor bitstream handling, enabling an authenticated, local attacker with OS access to write a modified firmware image to the FPGA. Consequences include potential device ...

CVE-2020-3120

CVE-2020-3120 affects Cisco FXOS, IOS XR, and NX-OS CDP handling. A missing check when processing Cisco Discovery Protocol messages could let an unauthenticated, adjacent attacker cause a device reload and DoS by sending crafted CDP packets (Layer 2). Impact per sources is DoS via memory exhausti...

CVE-2023-20050

CVE-2023-20050 affects Cisco NX-OS Software CLI, where insufficient validation of CLI arguments allows an authenticated, local attacker to inject commands and run arbitrary OS commands with the privileges of the logged-in user. Multiple connected sources (Cisco advisory, Nessus/NES plugins, and C...

CVE-2019-1965

CVE-2019-1965 concerns Cisco NX-OS Software where the Virtual Shell (VSH) session management can fail to delete VSH processes after a remote management disconnect, leading to a memory leak and potential system DoS. The root cause is improper deletion of VSH processes when a remote management conn...

CVE-2020-3517

The CVE-2020-3517 issue affects Cisco FXOS and NX-OS Software, specifically the Cisco Fabric Services component. The vulnerability arises from insufficient error handling when parsing Cisco Fabric Services messages, enabling an unauthenticated attacker to trigger process crashes that could result...

CVE-2019-1901

Cisco Nexus 9000 Series ACI Mode Switch Software contains a LLDP-related buffer overflow (CVE-2019-1901) due to improper TLV field input validation. Affected on Nexus 9000 Fabric Switches in ACI mode running before 13.2(7f) or any 14.x release. Exploitation requires a directly connected interface...

CVE-2019-1963

Cisco FXOS and NX-OS Software are affected by CVE-2019-1963 in the SNMP input packet processor. The issue arises from improper validation of ASN.1-encoded SNMP variables, allowing an authenticated, remote attacker to trigger the SNMP daemon to restart, potentially causing multiple restarts and a ...

CVE-2019-1858

Summary (CVE-2019-1858) : A vulnerability in the SNMP input packet processor on Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, leading to repeated restarts and a DoS condition. Root cause is imprope...

CVE-2020-3170

The CVE-2020-3170 entry covers Cisco NX-OS Software NX-API Denial of Service. Affected component: NX-API feature. Root cause: incorrect validation of the HTTP header in requests to NX-API. Impact: unauthenticated, remote attacker can cause the NX-API system process to restart, resulting in a DoS ...

CVE-2019-1962

The CVE-2019-1962 issue affects Cisco NX-OS Software, specifically the Cisco Fabric Services over IP (CFSoIP) component. The root cause is insufficient validation of TCP packets processed by CFSoIP, which could let an unauthenticated, remote attacker send a malicious CFSoIP TCP packet to trigger ...

CVE-2019-1593

Cisco NX-OS Software contains a vulnerability in the Bash shell implementation that allows a locally authenticated attacker to bypass RBAC and escalate privileges by executing commands intended for higher-privilege roles. The issue stems from an incorrect Bash shell command implementation that by...

CVE-2019-1594

Cisco NX-OS Software contains a Denial of Service vulnerability (CVE-2019-1594) in the 802.1X EAPOL handling. An unauthenticated, adjacent attacker can send crafted EAPOL frames to a targeted interface, triggering incomplete input validation that can cause the Layer 2 forwarding process to restar...

CVE-2018-0311

CVE-2018-0311 affects Cisco FXOS Software and Cisco NX-OS Software, where an unauthenticated, remote attacker can cause a DoS by sending crafted Cisco Fabric Services packets. The root cause is inadequate validation of Fabric Services packets, potentially triggering a buffer overflow and device c...

CVE-2019-1598

CVE-2019-1598 describes multiple LDAP parsing vulnerabilities in Cisco FXOS/NX-OS that allow an unauthenticated attacker to trigger a device reload and DoS by sending a BER-formatted LDAP packet from a configured LDAP source. Affected products/families and pre-patch versions (Cisco FXOS: <2.0....

CVE-2019-1812

Cisco NX-OS CLI Command Software Image Signature Verification (CVE-2019-1812) affects Cisco NX-OS Software, where the Image Signature Verification feature fails to properly verify digital signatures during CLI command execution. This can allow an authenticated, local attacker with administrator-l...

CVE-2018-0291

Summary of CVE-2018-0291 : A vulnerability in the SNMP input packet processor of Cisco NX-OS Software allows an authenticated, remote attacker to cause the SNMP application to restart, potentially repeatedly, leading to a system-level DoS. The issue stems from improper validation of SNMP PDUs in ...

CVE-2019-1734

CVE-2019-1734 affects Cisco FXOS and NX-OS Software. Root cause: incomplete RBAC verification in a CLI diagnostic command, allowing an authenticated, local attacker to arbitrarily read sensitive files with valid credentials. Impact: information disclosure; no exploitation details provided beyond ...

CVE-2019-1780

CVE-2019-1780 is a Cisco FXOS/NX-OS command-injection vulnerability in the CLI caused by insufficient validation of arguments passed to certain CLI commands. An authenticated local attacker with administrator credentials can exploit this to execute arbitrary commands on the underlying operating s...

CVE-2018-0307

CVE-2018-0307 is Cisco NX-OS CLI Arbitrary Command Injection due to insufficient input validation of CLI command arguments. An authenticated, local attacker could exploit this vulnerability to execute arbitrary commands with root privileges, potentially accessing files across VDC contexts. Affect...

CVE-2019-1588

Cisco Nexus 9000 Series Fabric Switches operating in Application-Centric Infrastructure (ACI) mode contain a local, authenticated arbitrary file read vulnerability. The issue arises from insufficient input and validation of user-supplied data, enabling an attacker with local access to read arbitr...

CVE-2018-0331

The CVE-2018-0331 issue is a DoS in Cisco NX-OS FXOS/NX-OS/NCS/UCS Manager by failing to validate certain CDP fields in CDP messages. An unauthenticated, adjacent attacker can trigger a DoS that restarts affected devices. Affected products include Firepower 4100/NX-OS-based platforms, various Nex...

CVE-2019-1601

Cisco NX-OS Software Unauthorized Filesystem Access (CVE-2019-1601) allows an authenticated, local attacker to read/write a restricted configuration file, enabling bypass of authentication and login as any user. Affected devices include MDS 9000 Series, Nexus 3000/3500/3600, Nexus 2000/5500/5600/...

CVE-2019-1795

Cisco FXOS Software and Cisco NX-OS Software are affected by CVE-2019-1795, a command-injection vulnerability in the CLI. The flaw stems from insufficient validation of arguments passed to a specific CLI command, allowing an authenticated, local attacker with valid administrator credentials to ru...

CVE-2019-1609

CVE-2019-1609 describes a Cisco NX-OS CLI command-injection vulnerability. The issue arises from insufficient validation of arguments passed to certain CLI commands, allowing an authenticated, local attacker to inject commands and execute arbitrary OS commands with elevated privileges. Affected d...

CVE-2019-1774

Cisco NX-OS Software command injection vulnerability (CVE-2019-1774) affects the CLI; an authenticated, local attacker can exploit insufficient validation of CLI arguments to execute arbitrary commands on the underlying operating system with elevated privileges, requiring administrator credential...

CVE-2019-1604

CVE-2019-1604 affects Cisco NX-OS Software privilege escalation via an incorrect authorization check for user accounts and their GID. An authenticated, local attacker can exploit a logic error to run higher-privileged commands on the Linux shell of affected devices. Affected platforms and version...

CVE-2019-1597

CVE-2019-1597 describes multiple LDAP parsing flaws in Cisco FXOS/NX-OS that permit an unauthenticated, remote attacker to force a device reload and DoS by sending a BER-crafted LDAP packet from a configured LDAP server IP. Affected product families and versions include: Firepower 4100 series: &l...

CVE-2019-1600

CVE-2019-1600 concerns Cisco FXOS and NX-OS software. The vulnerability arises from improper file system permissions, allowing an authenticated, local attacker to access or modify restricted files and potentially expose sensitive data stored on the system. Affected products include Cisco FXOS/NX-...

CVE-2019-1616

CVE-2019-1616 is a denial-of-service vulnerability in Cisco NX-OS Software’s Cisco Fabric Services. The issue arises from insufficient validation of Cisco Fabric Services packets, enabling an unauthenticated, remote attacker to send crafted packets that cause a buffer overflow, triggering process...

CVE-2019-1811

Cisco NX-OS has a local, authenticated vulnerability in the Image Signature Verification feature that can allow an administrator to install an unsigned software image due to signatures not being properly verified during CLI command execution. Affected product: Cisco NX-OS Software; the issue stem...

CVE-2019-1790

CVE-2019-1790 affects Cisco NX-OS Software CLI. An authenticated local attacker with valid administrator credentials can supply malicious input to certain CLI commands, causing the underlying OS to execute arbitrary commands with elevated privileges. Cisco has released software updates addressing...

CVE-2019-1599

CVE-2019-1599 is a Cisco NX-OS Software Netstack DoS vulnerability. The issue arises from memory buffer allocation/freeing in the network stack, which an unauthenticated, remote attacker can exploit by sending crafted TCP streams to an affected device, potentially exhausting network buffers and i...

CVE-2019-1608

CVE-2019-1608 describes a local CLI command injection in Cisco NX-OS Software. An authenticated, local attacker could exploit insufficient validation of CLI arguments to run arbitrary commands on the device’s underlying OS with elevated privileges. Affected software includes MDS 9000 Series switc...

CVE-2019-1726

Cisco NX-OS Software CLI bypass (CVE-2019-1726) is verified in multiple sources as a vulnerability where an authenticated, local attacker could bypass restrictions by supplying crafted arguments to a CLI command, potentially gaining access to internal services such as NX-API. Root cause is insuff...

CVE-2019-1767

CVE-2019-1767 describes a vulnerability in Cisco NX-OS Software where an authenticated, local attacker with administrator credentials could trigger a buffer overflow or command injection via insufficient validation of arguments to a specific CLI command. A successful exploit could allow execution...

CVE-2019-1776

CVE-2019-1776 affects Cisco NX-OS Software, where the CLI passes arguments to a specific command without proper validation. The issue allows an authenticated, local attacker with administrator credentials to run arbitrary commands on the underlying Linux OS with root privileges. The vulnerability...

CVE-2019-1779

Cisco FXOS and NX-OS Software contain a command-injection vulnerability in the CLI due to insufficient validation of arguments for certain commands. An authenticated, local attacker with valid credentials could exploit this to execute arbitrary OS commands with elevated privileges on the affected...

CVE-2018-0301

The CVE-2018-0301 entry describes a vulnerability in Cisco NX-OS NX-API where an unauthenticated remote attacker can send crafted HTTP/HTTPS packets to the management interface, triggering a buffer overflow due to improper input validation in the NX-API authentication module. This could allow arb...

CVE-2019-1605

CVE-2019-1605 concerns Cisco NX-OS NX-API Arbitrary Code Execution. Affected devices (various Nexus platforms and MDS/NX-OS line cards) are exposed to a local, authenticated attacker due to improper input validation in NX-API, allowing buffer overflow and root-level code execution via crafted HTT...

CVE-2019-1768

Cisco NX-OS Software contains a vulnerability (CVE-2019-1768) arising from insufficient validation of arguments passed to a specific CLI command, enabling an authenticated local attacker with administrator credentials to cause a buffer overflow or command injection. The issue affects the way cert...

CVE-2018-0306

CVE-2018-0306 describes an input-validation flaw in the CLI parser of Cisco NX-OS Software that enables an authenticated, local attacker to perform command-injection and execute arbitrary root-level commands. Affected products include MDS 9000 switches, Nexus series (1000V, 1100, 2000, 3000, 3500...

CVE-2019-1782

Cisco FXOS and NX-OS Software Command Injection (CVE-2019-1782) affects the CLI of Cisco FXOS and NX-OS. The vulnerability stems from insufficient validation of arguments passed to certain CLI commands, allowing an authenticated, local attacker to run arbitrary commands on the device’s underlying...

CVE-2019-1783

Cisco NX-OS Software Command Injection (CVE-2019-1783) affects the CLI of Cisco NX-OS. The vulnerability arises from insufficient validation of arguments passed to a specific CLI command, allowing an authenticated local attacker with administrator credentials to input malicious arguments that res...

CVE-2019-1791

Cisco NX-OS Software Command Injection (CVE-2019-1791) affects the CLI of Cisco NX-OS; an authenticated local attacker with administrator credentials can exploit insufficient validation of CLI arguments to run arbitrary commands on the underlying Linux/OS with elevated privileges. Impact includes...

CVE-2019-1611

The CVE-2019-1611 issue is a vulnerability in the Cisco NX-OS FXOS CLI where insufficient validation of CLI arguments enables an authenticated, local attacker with valid admin credentials to execute arbitrary commands on the device with elevated privileges. The concern affects multiple Cisco plat...

CVE-2019-1784

CVE-2019-1784 affects Cisco NX-OS Software CLI: insufficient validation of arguments in a specific CLI command allows an authenticated, local attacker to run arbitrary commands on the underlying Linux OS with root privileges. The issue arises from improper argument validation on the affected devi...

CVE-2019-1610

Cisco NX-OS Software CLI Command Injection (CVE-2019-1610) affects Nexus 3500 and Nexus 3000 series switches running versions prior to 7.0(3)I7(4). The issue is due to insufficient validation of arguments to certain CLI commands, allowing an authenticated, local attacker with administrator creden...

CVE-2019-1612

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612) affects Nexus 3000, Nexus 3500, Nexus 3600 platforms and NX-OS Stand releases, with root cause tied to insufficient validation of CLI arguments. An authenticated local attacker with administrator credentials could exploit th...