Vulnerabilities > Cisco > NX OS > 8.3.0.cv.0.342

DATE CVE VULNERABILITY TITLE RISK
2019-03-08 CVE-2019-1609 Command Injection vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.
local
low complexity
cisco CWE-77
7.2
2019-03-08 CVE-2019-1608 Command Injection vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.
local
low complexity
cisco CWE-77
7.2
2019-03-08 CVE-2019-1604 Improper Authorization vulnerability in Cisco Nx-Os
A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device.
local
low complexity
cisco CWE-285
7.2
2019-03-08 CVE-2019-1601 Improper Access Control vulnerability in Cisco Nx-Os
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file.
local
low complexity
cisco CWE-284
7.2
2019-03-07 CVE-2019-1600 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco Firepower Extensible Operating System and Nx-Os
A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive information that is stored in the file system of an affected system.
local
low complexity
cisco CWE-732
4.4
2019-03-07 CVE-2019-1599 Resource Management Errors vulnerability in Cisco Nx-Os
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device.
network
low complexity
cisco CWE-399
7.8
2019-03-06 CVE-2019-1594 Improper Input Validation vulnerability in Cisco Nx-Os
A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.
low complexity
cisco CWE-20
6.1
2019-03-06 CVE-2019-1593 Permissions, Privileges, and Access Controls vulnerability in Cisco Nx-Os
A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level by executing commands authorized to other user roles.
local
low complexity
cisco CWE-264
7.2
2019-03-06 CVE-2019-1591 Command Injection vulnerability in Cisco Nx-Os
A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escape a restricted shell on an affected device.
local
low complexity
cisco CWE-77
7.2
2019-03-06 CVE-2019-1588 Improper Privilege Management vulnerability in Cisco Nx-Os
A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected device.
local
low complexity
cisco CWE-269
2.1