Vulnerabilities > Cisco > Nexus 7000 9 Slot

DATE CVE VULNERABILITY TITLE RISK
2014-05-26 CVE-2013-1191 Permissions, Privileges, and Access Controls vulnerability in Cisco products
Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400.
network
high complexity
cisco CWE-264
7.1
2014-05-07 CVE-2014-0684 Improper Input Validation vulnerability in Cisco products
Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136.
local
low complexity
cisco CWE-20
4.6
2013-10-05 CVE-2012-4090 Permissions, Privileges, and Access Controls vulnerability in Cisco products
The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089.
network
low complexity
cisco CWE-264
4.0
2013-04-29 CVE-2013-1226 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products
The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a crafted frame, aka Bug ID CSCug47098.
low complexity
cisco CWE-119
6.1
2013-04-25 CVE-2013-1180 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products
Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54822.
network
low complexity
cisco CWE-119
critical
9.0
2013-04-25 CVE-2013-1179 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products
Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allow remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54830.
network
low complexity
cisco CWE-119
critical
9.0
2013-04-25 CVE-2013-1178 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.
low complexity
cisco CWE-119
8.3
2013-01-19 CVE-2012-6396 Resource Management Errors vulnerability in Cisco products
Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID CSCud44300.
network
high complexity
cisco CWE-399
4.9
2012-09-16 CVE-2012-3051 Remote Denial of Service vulnerability in Cisco Nexus 7000 Series Switches NX-OS
Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822.
low complexity
cisco
6.1
2012-08-06 CVE-2012-2469 Remote Denial of Service vulnerability in Cisco NX-OS
Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows remote attackers to cause a denial of service (device reset) via a malformed Cisco Discovery Protocol (CDP) packet, aka Bug IDs CSCtk34535 and CSCtk19132.
network
low complexity
cisco
7.8