Vulnerabilities > Cisco > Nexus 5672Up 16G

DATE CVE VULNERABILITY TITLE RISK
2019-08-28 CVE-2019-1965 Missing Release of Resource after Effective Lifetime vulnerability in Cisco Nx-Os
A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination.
network
low complexity
cisco CWE-772
4.0
2019-05-15 CVE-2019-1791 Argument Injection or Modification vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device.
local
low complexity
cisco CWE-88
7.2
2019-05-15 CVE-2019-1790 Argument Injection or Modification vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device.
local
low complexity
cisco CWE-88
7.2
2018-10-17 CVE-2018-0378 Improper Input Validation vulnerability in Cisco Nx-Os 7.3(2)N1(0.8)
A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-20
7.8
2017-05-22 CVE-2017-6650 Improper Input Validation vulnerability in Cisco Nx-Os
A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack.
local
low complexity
cisco CWE-20
4.6
2017-05-22 CVE-2017-6649 Improper Input Validation vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack.
local
low complexity
cisco CWE-20
4.6
2016-10-06 CVE-2015-6393 Resource Management Errors vulnerability in Cisco Nx-Os
Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via malformed IPv4 DHCP packets to the DHCPv4 relay agent, aka Bug IDs CSCuq39250, CSCus21733, CSCus21739, CSCut76171, and CSCux67182.
network
low complexity
cisco CWE-399
7.8
2016-10-06 CVE-2015-0721 Permissions, Privileges, and Access Controls vulnerability in Cisco Nx-Os
Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.
network
low complexity
cisco CWE-264
critical
9.0
2016-10-06 CVE-2015-6392 Resource Management Errors vulnerability in Cisco Nx-Os
Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via crafted IPv4 DHCP packets to the (1) DHCPv4 relay agent or (2) smart relay agent, aka Bug IDs CSCuq24603, CSCur93159, CSCus21693, and CSCut76171.
network
low complexity
cisco CWE-399
7.8