Vulnerabilities > Cisco > Nexus 5000

DATE CVE VULNERABILITY TITLE RISK
2012-08-06 CVE-2012-1357 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco Nexus 5000 and Nx-Os
The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets, aka Bug ID CSCts46521.
network
low complexity
cisco CWE-119
5.0
2012-02-16 CVE-2012-0352 Resource Management Errors vulnerability in Cisco products
Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet, aka Bug IDs CSCti23447, CSCti49507, and CSCtj01991.
network
low complexity
cisco CWE-399
7.8
2011-09-14 CVE-2011-2581 Permissions, Privileges, and Access Controls vulnerability in Cisco Nexus 5000 and Nx-Os
The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490.
network
low complexity
cisco CWE-264
5.0
2009-09-08 CVE-2009-0627 Unspecified vulnerability in Cisco Nexus 5000, Nexus 7000 and Nx-Os
Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1), when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service (crash) via an unspecified "sequence of TCP packets" related to "TCP State manipulation," possibly related to separate attacks against CVE-2008-4609.
network
low complexity
cisco
7.8