Vulnerabilities > Cisco > NX OS > Medium

DATE CVE VULNERABILITY TITLE RISK
2013-01-19 CVE-2012-6396 Resource Management Errors vulnerability in Cisco products
Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID CSCud44300.
network
high complexity
cisco CWE-399
4.9
2012-09-16 CVE-2012-3051 Remote Denial of Service vulnerability in Cisco Nexus 7000 Series Switches NX-OS
Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822.
low complexity
cisco
6.1
2012-08-06 CVE-2012-1357 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco Nexus 5000 and Nx-Os
The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets, aka Bug ID CSCts46521.
network
low complexity
cisco CWE-119
5.0
2011-10-27 CVE-2011-2569 Permissions, Privileges, and Access Controls vulnerability in Cisco products
Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188.
local
low complexity
cisco CWE-264
6.8
2011-09-14 CVE-2011-2581 Permissions, Privileges, and Access Controls vulnerability in Cisco Nexus 5000 and Nx-Os
The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490.
network
low complexity
cisco CWE-264
5.0