Unscored severity · published Jun 12, 2015
CVE-2015-0775
The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS…
–
CVSS
3%
EPSS
No
On KEV
Description
The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS 9000 devices, 6.2(12) on Nexus 7000 devices, 7.0(3) on Nexus 9000 devices, and 7.2(0)ZN(99.67) on Nexus 3000 devices allows remote attackers to cause a denial of service (login process reset) via an unspecified terminal-session request during TELNET session setup, aka Bug IDs CSCuo10554, CSCuu75466, CSCuu75471, CSCuu75484, CSCuu75498, CSCuu77170, and CSCuu77182.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M9
Mds 9000 Nx-os · Cisco
6.2(11) · source: NVD
N1
Nexus 1000v · Cisco
All versions, or not specified · source: NVD
NX
Nx-os · Cisco
4.1(2)e1(1f); 7.2(0)zn(99.67); 6.0(2)n2(2); 6.2(12) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0775
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0775
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=39280
Third Party Advisory
http://www.securitytracker.com/id/1032561
Third Party Advisory
http://www.securitytracker.com/id/1032562
More from Mds 9000 Nx-os
6.5
CVE-2017-6655
A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of…
–
CVE-2015-4323
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices…
–
CVE-2012-1340
The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service (module reload) via…