CVE-2015-0721
8.0
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: NVD
Description
Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.
Affected (178)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.1.(2) |
| Running on/with | Platform Versions |
|---|---|
Cisco Nexus 7000 10 Slot | All versions |
Cisco Nexus 7000 18 Slot | All versions |
Cisco Nexus 7000 4 Slot | All versions |
Cisco Nexus 7000 9 Slot | All versions |
Cisco Nexus 7700 10 Slot | All versions |
Cisco Nexus 7700 18 Slot | All versions |
Cisco Nexus 7700 2 Slot | All versions |
Cisco Nexus 7700 6 Slot | All versions |
Configuration B
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.0(0)n1(1a) |
| Running on/with | Platform Versions |
|---|---|
Cisco Nexus 5010 | All versions |
Cisco Nexus 5020 | All versions |
Cisco Nexus 5548p | All versions |
Cisco Nexus 5548up | All versions |
Cisco Nexus 5596t | All versions |
Cisco Nexus 5596up | All versions |
Cisco Nexus 56128p | All versions |
Cisco Nexus 5624q | All versions |
Cisco Nexus 5648q | All versions |
Cisco Nexus 5672up | All versions |
Cisco Nexus 5672up 16g | All versions |
Cisco Nexus 5696q | All versions |
Configuration D
Configuration E
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.0(3)u1(1) |
| Running on/with | Platform Versions |
|---|---|
Cisco Nexus 3016 | All versions |
Cisco Nexus 3048 | All versions |
Cisco Nexus 31108pc V | All versions |
Cisco Nexus 31108tc V | All versions |
Cisco Nexus 31128pq | All versions |
Cisco Nexus 3132q | All versions |
Cisco Nexus 3132q V | All versions |
Cisco Nexus 3164q | All versions |
Cisco Nexus 3172 | All versions |
Cisco Nexus 3232c | All versions |
Cisco Nexus 3264q | All versions |
Cisco Nexus 3524 | All versions |
Cisco Nexus 3548 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.0(1b) |
| Running on/with | Platform Versions |
|---|---|
Cisco Nexus 92160yc X | All versions |
Cisco Nexus 92304qc | All versions |
Cisco Nexus 9236c | All versions |
Cisco Nexus 9272q | All versions |
Cisco Nexus 93108tc Ex | All versions |
Cisco Nexus 93120tx | All versions |
Cisco Nexus 93128tx | All versions |
Cisco Nexus 93180yc Ex | All versions |
Cisco Nexus 9332pq | All versions |
Cisco Nexus 9336pq Aci Spine | All versions |
Cisco Nexus 9372px | All versions |
Cisco Nexus 9372tx | All versions |
Cisco Nexus 9396px | All versions |
Cisco Nexus 9396tx | All versions |
Cisco Nexus 9504 | All versions |
Cisco Nexus 9508 | All versions |
Cisco Nexus 9516 | All versions |
Related CWEs
References (6)
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.