Nexus 3600

DATE	CVE	VULNERABILITY TITLE	RISK
2019-05-15	CVE-2019-1731	Information Exposure vulnerability in Cisco Nx-Os A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. local low complexity cisco CWE-200	2.1
2019-05-15	CVE-2019-1730	Permissions, Privileges, and Access Controls vulnerability in Cisco Nx-Os A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell. local low complexity cisco CWE-264	7.2
2019-05-15	CVE-2019-1729	Improper Input Validation vulnerability in Cisco Nx-Os A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system files. local low complexity cisco CWE-20	6.6
2019-05-15	CVE-2019-1728	Improper Verification of Cryptographic Signature vulnerability in Cisco Nx-Os A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the privileges of root. local low complexity cisco CWE-347	7.2
2019-05-15	CVE-2019-1727	OS Command Injection vulnerability in Cisco Nx-Os A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. local low complexity cisco CWE-78	7.2
2019-05-15	CVE-2019-1726	Improper Input Validation vulnerability in Cisco Nx-Os A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. local low complexity cisco CWE-20	4.6
2019-03-11	CVE-2019-1611	Command Injection vulnerability in Cisco Fx-Os and Nx-Os A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. local low complexity cisco CWE-77	7.2
2019-03-08	CVE-2019-1609	Command Injection vulnerability in Cisco Nx-Os A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. local low complexity cisco CWE-77	7.2
2019-03-08	CVE-2019-1605	Improper Input Validation vulnerability in Cisco Nx-Os A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. local low complexity cisco CWE-20	7.2
2019-03-08	CVE-2019-1604	Improper Authorization vulnerability in Cisco Nx-Os A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. local low complexity cisco CWE-285	7.2