Vulnerabilities > Cisco > NX OS > 5.0.2

DATE CVE VULNERABILITY TITLE RISK
2014-05-26 CVE-2014-2201 Unspecified vulnerability in Cisco products
The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a large volume of crafted traffic, aka Bug ID CSCtw98915.
network
low complexity
cisco
7.8
2014-05-20 CVE-2013-6975 Path Traversal vulnerability in Cisco Nx-Os
Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217.
local
low complexity
cisco CWE-22
4.6
2014-01-08 CVE-2013-6982 Improper Input Validation vulnerability in Cisco Nx-Os
The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.
network
cisco CWE-20
4.3
2013-12-21 CVE-2012-4135 Path Traversal vulnerability in Cisco Nx-Os
Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.
local
low complexity
cisco CWE-22
4.6
2013-04-25 CVE-2013-1181 Improper Input Validation vulnerability in Cisco products
Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.0(3)N2(2), Nexus 3000 devices 5.x before 5.0(3)U3(2), and Unified Computing System (UCS) 6200 devices before 2.0(1w) allows remote attackers to cause a denial of service (device reload) by sending a jumbo packet to the management interface, aka Bug IDs CSCtx17544, CSCts10593, and CSCtx95389.
network
low complexity
cisco CWE-20
7.8
2013-04-25 CVE-2013-1180 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products
Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54822.
network
low complexity
cisco CWE-119
critical
9.0
2013-04-25 CVE-2013-1179 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products
Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allow remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54830.
network
low complexity
cisco CWE-119
critical
9.0
2013-04-25 CVE-2013-1178 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.
low complexity
cisco CWE-119
8.3
2013-02-13 CVE-2013-1122 Improper Input Validation vulnerability in Cisco Nexus 7000 and Nx-Os
Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause a denial of service (M1-Series module reload) via crafted packets, aka Bug ID CSCud15673.
network
low complexity
cisco CWE-20
5.0
2012-05-03 CVE-2011-4023 Resource Management Errors vulnerability in Cisco products
Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumption) via SNMP requests, aka Bug ID CSCtr65682.
network
low complexity
cisco CWE-399
7.8