NX
Product
NX-OS
On CISA KEVExploited in the wild
274
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 97Medium 97Low 1
Watch
Add NX-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-6394 | – | Dec 5 | The kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices allows local users to cause a denial of service (device crash) via crafted USB parameters, aka Bug ID CSCus89408 Affected: 5.2(9)n1(1) |
| CVE-2015-6308 | – | Oct 2 | Cisco NX-OS 6.0(2)U6(0.46) on N3K devices allows remote authenticated users to cause a denial of service (temporary SNMP outage) via an SNMP request for an OID that does not… Affected: 6.0(2)u6(0.46) |
| CVE-2015-6295 | – | Sep 20 | Cisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to cause a denial of service (CPU consumption or control-plane instability) or trigger… Affected: 6.1(2)i3(4); 7.0(3)i1(1) |
| CVE-2015-6277 | – | Sep 2 | The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices… Affected: 7.3(0)zd(0.47); 4.1(2)e1; 7.0(0)hsk(0.353); 7.3(0)zd(0.61) |
| CVE-2015-4323 | – | Aug 19 | Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices… Affected: 6.2(14)s1; 6.0(2)u5(1.41); 7.0(3)i2(0.373); 7.3(0)zn(0.83); 7.3(0)zn(0.9); 7.3(0)zn(0.9); +1 more |
| CVE-2015-4296 | – | Aug 19 | Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial of service (Java process restart) via crafted connections… Affected: 6.0(2)a6(1) |
| CVE-2015-4277 | – | Aug 19 | The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local… Affected: 5.1.3; 5.3.0 |
| CVE-2015-4324 | – | Aug 19 | Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)E1(1c), Nexus 7000 devices… Affected: 7.3(0)zn(0.81); 7.3(0)zn(0.81); 7.3(0)zn(0.81); 4.1(2)e1(1c); 7.2(0)n1(0.1) |
| CVE-2015-4301 | – | Aug 19 | Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang) via large files that are copied to a device's filesystem,… Affected: 11.1(1c) |
| CVE-2015-4235 | – | Jul 24 | Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o) and 1.1 before 1.1(1j) and Nexus 9000 ACI devices with software before 11.0(4o) and… Affected: 11.0(1b); 11.0(1c); 11.0(1d); 11.0(1e); 11.0(2j); 11.0(2m); +5 more |
| CVE-2015-4237 | – | Jul 3 | The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on Nexus devices allows local users to execute arbitrary OS… Affected: 7.2(0)zz(99.3); 7.2(0)zz(99.1); 6.2(11b); 9.1(1)sv1(3.1.8); 7.2(0)zz(99.1); 6.2(12); +1 more |
| CVE-2015-4234 | – | Jul 3 | Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter,… Affected: 6.0(2); 6.2(2) |
| CVE-2015-4232 | – | Jul 3 | Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856 Affected: 6.2(10) |
| CVE-2015-4231 | – | Jul 3 | The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging… Affected: 6.2(8a) |
| CVE-2015-4225 | – | Jun 27 | Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote… Affected: 1.0(1.110a); 1.0(1e) |
| CVE-2015-4213 | – | Jun 24 | Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID… Affected: 1.1(1g) |
| CVE-2015-4197 | – | Jun 20 | Cisco NX-OS 5.2(5) on Nexus 7000 devices allows remote attackers to cause a denial of service (device crash) by sending a malformed LLDP packet on the local network, aka Bug ID… Affected: 5.2(5) |
| CVE-2015-0775 | – | Jun 12 | The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS… Affected: 4.1(2)e1(1f); 7.2(0)zn(99.67); 6.0(2)n2(2); 6.2(12) |
| CVE-2015-0686 | – | Apr 3 | The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a… Affected: 6.1(2)i2(3) |
| CVE-2015-0658 | – | Mar 28 | The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to… Affected: 6.1(2); 6.1(3); 6.1(4); 6.1(4a); 6.2(2); 6.2(2a); +34 more |
| CVE-2014-8013 | – | Feb 3 | The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service (device reload) via a long CLI command, aka Bug ID CSCur54182 Affected: All versions, or not specified |
| CVE-2015-0582 | – | Jan 10 | The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129 Affected: All versions, or not specified |
| CVE-2014-3341 | – | Aug 19 | The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID… Affected: through 7.0\(3\)n1\(1\); 5.0(2)n1(1); 5.0(2)n2(1); 5.0(2)n2(1a); 5.0(3)n1(1c); 5.0(3)n2(1); +34 more |
| CVE-2014-3330 | – | Aug 11 | Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access… Affected: 6.1(2)i2(1) |
| CVE-2014-3295 | – | Jun 14 | The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and… Affected: through 6.2\(2a\); 4.1.(2); 4.1.(3); 4.1.(4); 4.1.(5); 4.2(3); +28 more |
| CVE-2014-3261 | – | May 26 | Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on… Affected: 5.2; 5.2(1); 5.2(3); 5.0; 5.0(2); 5.0(2)n1(1); +34 more |
| CVE-2014-2201 | – | May 26 | The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of… Affected: 6.0(1); through 6.2\(5a\); 6.2(1); 6.2(1n); 6.2(3); 6.2(3n); +1 more |
| CVE-2014-2200 | – | May 26 | Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an… Affected: 5.0(3)n1(1); 5.0(3)n1(1a); 5.0(3)n1(1b); 5.0(3)n1(1c); 5.0(3)n2(1); 5.0(3)n2(2); +24 more |
| CVE-2013-1191 | – | May 26 | Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an… Affected: 6.1; 6.1(1); 6.1(2); 6.1(3); 6.1(4); 6.1(4a) |
| CVE-2013-6975 | – | May 20 | Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID… Affected: through 6.2\(2a\); 6.0(1); 6.0(2); 6.1; 6.1(1); 6.1(2); +2 more |
| CVE-2014-0684 | – | May 7 | Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136 Affected: 6.2(2) |
| CVE-2014-0677 | – | Jan 22 | The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage) via LDP discovery traffic… Affected: All versions, or not specified |
| CVE-2014-0676 | – | Jan 22 | Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367 Affected: All versions, or not specified |
| CVE-2013-6982 | – | Jan 8 | The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families,… Affected: through 6.2\(2a\); 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); +34 more |
| CVE-2012-4135 | – | Dec 21 | Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete… Affected: through 6.1\(2\); 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); +34 more |
| CVE-2012-4131 | – | Dec 21 | Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159,… Affected: All versions, or not specified |
| CVE-2013-6683 | – | Nov 13 | The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attackers to cause a denial of service (NS processing outage) via a… Affected: All versions, or not specified |
| CVE-2013-5566 | – | Nov 8 | Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service (supervisor CPU consumption) via Authentication Header (AH) authentication in… Affected: through 5.0; 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); +32 more |
| CVE-2012-4121 | – | Oct 14 | Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed (1) r and (2) w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and… Affected: All versions, or not specified |
| CVE-2012-4099 | – | Oct 14 | The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed… Affected: All versions, or not specified |
| CVE-2012-4097 | – | Oct 14 | The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service (BGP service reset) via a… Affected: All versions, or not specified |
| CVE-2012-4077 | – | Oct 14 | Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651 Affected: All versions, or not specified |
| CVE-2012-4076 | – | Oct 14 | Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs… Affected: All versions, or not specified |
| CVE-2012-4141 | – | Oct 5 | Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the "file name" parameter, aka… Affected: All versions, or not specified |
| CVE-2012-4122 | – | Oct 5 | The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs… Affected: All versions, or not specified |
| CVE-2012-4098 | – | Oct 5 | The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed… Affected: All versions, or not specified |
| CVE-2012-4091 | – | Oct 5 | The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2) RIPv6 message, aka Bug ID CSCtj73415 Affected: All versions, or not specified |
| CVE-2012-4090 | – | Oct 5 | The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the… Affected: All versions, or not specified |
| CVE-2012-4075 | – | Oct 5 | Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788 Affected: All versions, or not specified |
| CVE-2013-1121 | – | Sep 19 | The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service… Affected: All versions, or not specified |