nexus_9336pq_aci_spine Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/nexus_9336pq_aci_spine/ Sun, 26 Feb 2023 06:41:07 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png nexus_9336pq_aci_spine Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/nexus_9336pq_aci_spine/ 32 32 CVE-2020-3338 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3338/ Sun, 26 Feb 2023 06:41:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3338/ A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper error handling when processing inbound PIM6 packets. An attacker could exploit this vulnerability by […]

The post CVE-2020-3338 appeared first on CVE Vulnerability.

]]> A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper error handling when processing inbound PIM6 packets. An attacker could exploit this vulnerability by sending multiple crafted PIM6 packets to an affected device. A successful exploit could allow the attacker to cause the PIM6 application to leak system memory. Over time, this memory leak could cause the PIM6 application to stop processing legitimate PIM6 traffic, leading to a DoS condition on the affected device.

The post CVE-2020-3338 appeared first on CVE Vulnerability.

]]> CVE-2019-1969 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1969/ Sun, 26 Feb 2023 06:32:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1969/ A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the […]

The post CVE-2019-1969 appeared first on CVE Vulnerability.

]]> A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the configured ACL name is the maximum length, which is 32 ASCII characters. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP polling that should have been denied. The attacker has no control of the configuration of the SNMP ACL name.

The post CVE-2019-1969 appeared first on CVE Vulnerability.

]]> CVE-2019-1781 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1781/ Sun, 26 Feb 2023 06:31:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1781/ A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious […]

The post CVE-2019-1781 appeared first on CVE Vulnerability.

]]> A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need administrator credentials to exploit this vulnerability.

The post CVE-2019-1781 appeared first on CVE Vulnerability.

]]> CVE-2019-1782 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1782/ Sun, 26 Feb 2023 06:31:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1782/ A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious […]

The post CVE-2019-1782 appeared first on CVE Vulnerability.

]]> A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need administrator credentials to exploit this vulnerability.

The post CVE-2019-1782 appeared first on CVE Vulnerability.

]]> CVE-2019-1767 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1767/ Sun, 26 Feb 2023 06:31:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1767/ A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The […]

The post CVE-2019-1767 appeared first on CVE Vulnerability.

]]> A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit this vulnerability by including malicious input as the argument of the affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. An attacker would need valid administrator credentials to exploit these vulnerabilities. NX-OS versions prior to 8.3(1) are affected.

The post CVE-2019-1767 appeared first on CVE Vulnerability.

]]> CVE-2019-1768 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1768/ Sun, 26 Feb 2023 06:31:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1768/ A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The […]

The post CVE-2019-1768 appeared first on CVE Vulnerability.

]]> A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit this vulnerability by including malicious input as the argument of the affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. An attacker would need valid administrator credentials to exploit these vulnerabilities.

The post CVE-2019-1768 appeared first on CVE Vulnerability.

]]> CVE-2019-1735 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1735/ Sun, 26 Feb 2023 06:31:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1735/ A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input […]

The post CVE-2019-1735 appeared first on CVE Vulnerability.

]]> A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid user credentials to exploit this vulnerability.

The post CVE-2019-1735 appeared first on CVE Vulnerability.

]]> CVE-2021-1361 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1361/ Thu, 23 Feb 2023 14:06:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1361/ A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite arbitrary files with root privileges on the device. This vulnerability exists […]

The post CVE-2021-1361 appeared first on CVE Vulnerability.

]]> A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite arbitrary files with root privileges on the device. This vulnerability exists because TCP port 9075 is incorrectly configured to listen and respond to external connection requests. An attacker could exploit this vulnerability by sending crafted TCP packets to an IP address that is configured on a local interface on TCP port 9075. A successful exploit could allow the attacker to create, delete, or overwrite arbitrary files, including sensitive files that are related to the device configuration. For example, the attacker could add a user account without the device administrator knowing.

The post CVE-2021-1361 appeared first on CVE Vulnerability.

]]> CVE-2021-1230 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1230/ Thu, 23 Feb 2023 14:06:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1230/ A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of […]

The post CVE-2021-1230 appeared first on CVE Vulnerability.

]]> A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer.

The post CVE-2021-1230 appeared first on CVE Vulnerability.

]]>