nexus_9516 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/nexus_9516/ Sun, 26 Feb 2023 06:44:08 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png nexus_9516 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/nexus_9516/ 32 32 CVE-2018-0294 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-0294/ Sun, 26 Feb 2023 06:44:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-0294/ A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete sensitive files when certain CLI commands are used to clear the device configuration and […]

The post CVE-2018-0294 appeared first on CVE Vulnerability.

]]> A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete sensitive files when certain CLI commands are used to clear the device configuration and reload a device. An attacker could exploit this vulnerability by logging into an affected device as an administrative user and configuring an unauthorized account for the device. The account would not require a password for authentication and would be accessible only via a Secure Shell (SSH) connection to the device. A successful exploit could allow the attacker to configure an unauthorized account that has administrative privileges, does not require a password for authentication, and does not appear in the running configuration or the audit logs for the affected device. This vulnerability affects Firepower 4100 Series Next-Generation Firewalls, Firepower 9300 Security Appliance, Nexus 1000V Series Switches, Nexus 1100 Series Cloud Services Platforms, Nexus 2000 Series Fabric Extenders, Nexus 3500 Platform Switches, Nexus 4000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, UCS 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCvd13993, CSCvd34845, CSCvd34857, CSCvd34862, CSCvd34879, CSCve35753.

The post CVE-2018-0294 appeared first on CVE Vulnerability.

]]> CVE-2020-3504 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3504/ Sun, 26 Feb 2023 06:41:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3504/ A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of CLI command parameters. An attacker could exploit this vulnerability by executing specific commands on the local-mgmt […]

The post CVE-2020-3504 appeared first on CVE Vulnerability.

]]> A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of CLI command parameters. An attacker could exploit this vulnerability by executing specific commands on the local-mgmt CLI on an affected device. A successful exploit could allow the attacker to cause internal system processes to fail to terminate properly, which could result in a buildup of stuck processes and lead to slowness in accessing the UCS Manager CLI and web UI. A sustained attack may result in a restart of internal UCS Manager processes and a temporary loss of access to the UCS Manager CLI and web UI.

The post CVE-2020-3504 appeared first on CVE Vulnerability.

]]> CVE-2019-1858 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1858/ Sun, 26 Feb 2023 06:31:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1858/ A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly. The vulnerability is due to improper error handling when processing inbound […]

The post CVE-2019-1858 appeared first on CVE Vulnerability.

]]> A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly. The vulnerability is due to improper error handling when processing inbound SNMP packets. An attacker could exploit this vulnerability by sending multiple crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the SNMP application to leak system memory because of an improperly handled error condition during packet processing. Over time, this memory leak could cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.

The post CVE-2019-1858 appeared first on CVE Vulnerability.

]]> CVE-2019-1795 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1795/ Sun, 26 Feb 2023 06:31:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1795/ A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An […]

The post CVE-2019-1795 appeared first on CVE Vulnerability.

]]> A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.

The post CVE-2019-1795 appeared first on CVE Vulnerability.

]]> CVE-2019-1811 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1811/ Sun, 26 Feb 2023 06:31:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1811/ A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an […]

The post CVE-2019-1811 appeared first on CVE Vulnerability.

]]> A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an unsigned software image on an affected device.

The post CVE-2019-1811 appeared first on CVE Vulnerability.

]]> CVE-2019-1812 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1812/ Sun, 26 Feb 2023 06:31:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1812/ A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an […]

The post CVE-2019-1812 appeared first on CVE Vulnerability.

]]> A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an unsigned software image on an affected device.

The post CVE-2019-1812 appeared first on CVE Vulnerability.

]]> CVE-2019-1813 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1813/ Sun, 26 Feb 2023 06:31:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1813/ A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an […]

The post CVE-2019-1813 appeared first on CVE Vulnerability.

]]> A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an unsigned software image on an affected device.

The post CVE-2019-1813 appeared first on CVE Vulnerability.

]]> CVE-2019-1731 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1731/ Sun, 26 Feb 2023 06:31:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1731/ A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user’s private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The vulnerability is due to incomplete error handling if a specific error […]

The post CVE-2019-1731 appeared first on CVE Vulnerability.

]]> A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user’s private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The vulnerability is due to incomplete error handling if a specific error type occurs during the SSH key export. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the CLI. A successful exploit could allow the attacker to expose a user’s private SSH key. In addition, a similar type of error in the SSH key import could cause the passphrase-protected private SSH key to be imported unintentionally.

The post CVE-2019-1731 appeared first on CVE Vulnerability.

]]> CVE-2021-34714 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34714/ Thu, 23 Feb 2023 14:10:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34714/ A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker […]

The post CVE-2021-34714 appeared first on CVE Vulnerability.

]]> A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.

The post CVE-2021-34714 appeared first on CVE Vulnerability.

]]> CVE-2021-1591 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1591/ Thu, 23 Feb 2023 14:06:30 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1591/ A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass access control list (ACL) rules that are configured on an affected device. This vulnerability is due to oversubscription of resources that occurs when applying ACLs to port channel interfaces. An attacker could exploit […]

The post CVE-2021-1591 appeared first on CVE Vulnerability.

]]> A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass access control list (ACL) rules that are configured on an affected device. This vulnerability is due to oversubscription of resources that occurs when applying ACLs to port channel interfaces. An attacker could exploit this vulnerability by attempting to access network resources that are protected by the ACL. A successful exploit could allow the attacker to access network resources that would be protected by the ACL that was applied on the port channel interface.

The post CVE-2021-1591 appeared first on CVE Vulnerability.

]]>