Nexus 3500

DATE	CVE	VULNERABILITY TITLE	RISK
2019-03-08	CVE-2019-1605	Improper Input Validation vulnerability in Cisco Nx-Os A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. local low complexity cisco CWE-20	7.2
2019-03-08	CVE-2019-1604	Improper Authorization vulnerability in Cisco Nx-Os A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. local low complexity cisco CWE-285	7.2
2019-03-08	CVE-2019-1603	Improper Authorization vulnerability in Cisco Nx-Os A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. local low complexity cisco CWE-285	4.6
2019-03-08	CVE-2019-1602	Permissions, Privileges, and Access Controls vulnerability in Cisco Nx-Os A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. local low complexity cisco CWE-264	7.2
2019-03-08	CVE-2019-1601	Improper Access Control vulnerability in Cisco Nx-Os A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. local low complexity cisco CWE-284	7.2
2019-03-07	CVE-2019-1599	Resource Management Errors vulnerability in Cisco Nx-Os A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. network low complexity cisco CWE-399	7.8
2019-03-07	CVE-2019-1596	Permissions, Privileges, and Access Controls vulnerability in Cisco Nx-Os A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. local low complexity cisco CWE-264	7.2
2019-03-06	CVE-2019-1593	Permissions, Privileges, and Access Controls vulnerability in Cisco Nx-Os A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level by executing commands authorized to other user roles. local low complexity cisco CWE-264	7.2
2017-10-19	CVE-2017-12301	Improper Input Validation vulnerability in Cisco Nx-Os A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to the underlying operating system of the device. local low complexity cisco CWE-20	7.2