Vulnerabilities > Cisco > NX OS > High

DATE CVE VULNERABILITY TITLE RISK
2019-03-11 CVE-2019-1618 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco Nx-Os
A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to execute arbitrary code as root.
local
low complexity
cisco CWE-732
7.8
2019-03-11 CVE-2019-1617 Improper Control of Dynamically-Managed Code Resources vulnerability in Cisco Nx-Os
A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.
low complexity
cisco CWE-913
7.4
2019-03-11 CVE-2019-1616 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Nx-Os
A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-119
7.5
2019-03-11 CVE-2019-1614 OS Command Injection vulnerability in Cisco Nx-Os
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges.
network
low complexity
cisco CWE-78
8.8
2019-03-08 CVE-2019-1606 Argument Injection or Modification vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.
local
low complexity
cisco CWE-88
7.8
2019-03-08 CVE-2019-1605 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Nx-Os
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root.
local
low complexity
cisco CWE-119
7.8
2019-03-08 CVE-2019-1604 Incorrect Authorization vulnerability in Cisco Nx-Os
A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device.
local
low complexity
cisco CWE-863
7.8
2019-03-08 CVE-2019-1603 Incorrect Authorization vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level.
local
low complexity
cisco CWE-863
7.8
2019-03-08 CVE-2019-1602 Unspecified vulnerability in Cisco Nx-Os
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator.
local
low complexity
cisco
7.8
2019-03-08 CVE-2019-1601 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco Nx-Os
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file.
local
low complexity
cisco CWE-732
7.8