Lucene search
CiscoCISCO-SA-20140521-NXOSHistoryMay 21, 2014 - 4:00 p.m.
Multiple Vulnerabilities in Cisco NX-OS-Based Products
2014-05-2116:00:00
tools.cisco.com
18
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.002
Percentile
55.4%
Cisco Nexus, Cisco Unified Computing System (UCS), and Cisco 1000 Series Connected Grid Routers (CGR) are all based on the Cisco NX-OS operating system. These products are affected by one or more of the following vulnerabilities:
Cisco NX-OS Virtual Device Context SSH Privilege Escalation Vulnerability
Cisco NX-OS Virtual Device Context SSH Key Privilege Escalation Vulnerability
Cisco NX-OS-Based Products Smart Call Home Buffer Overflow Vulnerability
Cisco NX-OS Message Transfer Service Denial of Service Vulnerability
No officially released images are affected
Cisco has released software updates that address these vulnerabilities.
This advisory is available at the following link:
Affected configurations
Node
cisconx_osMatch4.1
ORcisconx_osMatch5.0
ORcisconx_osMatch4.2
ORcisconx_osMatch5.1
ORcisconx_osMatch5.2
ORcisconx_osMatch6.1
ORcisconx_osMatch4.0\(0\)n1
ORcisconx_osMatch4.0\(1a\)n1
ORcisconx_osMatch4.0\(1a\)n2
ORcisconx_osMatch4.1\(2\)e1
ORcisconx_osMatch4.1\(3\)n1
ORcisconx_osMatch4.1\(3\)n2
ORcisconx_osMatch4.2\(1\)n1
ORcisconx_osMatch4.2\(1\)n2
ORcisconx_osMatch5.0\(2\)n1
ORcisconx_osMatch5.0\(2\)n2
ORcisconx_osMatch5.0\(3\)n1
ORcisconx_osMatch5.0\(3\)n2
ORcisconx_osMatch5.0\(3\)u1
ORcisconx_osMatch6.0
ORciscounified_computing_systemMatchany
ORciscocg-osMatchany
ORcisconx_osMatch4.1\(2\)
ORcisconx_osMatch4.1\(3\)
ORcisconx_osMatch4.1\(4\)
ORcisconx_osMatch4.1\(5\)
ORcisconx_osMatch5.0\(2a\)
ORcisconx_osMatch5.0\(3\)
ORcisconx_osMatch5.0\(5\)
ORcisconx_osMatch4.2\(2a\)
ORcisconx_osMatch4.2\(3\)
ORcisconx_osMatch4.2\(4\)
ORcisconx_osMatch4.2\(6\)
ORcisconx_osMatch4.2\(8\)
ORcisconx_osMatch5.1\(1\)
ORcisconx_osMatch5.1\(1a\)
ORcisconx_osMatch5.1\(3\)
ORcisconx_osMatch5.1\(4\)
ORcisconx_osMatch5.1\(5\)
ORcisconx_osMatch5.1\(6\)
ORcisconx_osMatch5.2\(1\)
ORcisconx_osMatch5.2\(3a\)
ORcisconx_osMatch5.2\(4\)
ORcisconx_osMatch5.2\(5\)
ORcisconx_osMatch5.2\(7\)
ORcisconx_osMatch5.2\(9\)
ORcisconx_osMatch6.1\(1\)
ORcisconx_osMatch6.1\(2\)
ORcisconx_osMatch6.1\(3\)
ORcisconx_osMatch6.1\(4\)
ORcisconx_osMatch4.0\(0\)n1\(1a\)
ORcisconx_osMatch4.0\(0\)n1\(2\)
ORcisconx_osMatch4.0\(0\)n1\(2a\)
ORcisconx_osMatch4.0\(1a\)n1\(1\)
ORcisconx_osMatch4.0\(1a\)n1\(1a\)
ORcisconx_osMatch4.0\(1a\)n2\(1\)
ORcisconx_osMatch4.0\(1a\)n2\(1a\)
ORcisconx_osMatch4.1\(2\)e1\(1\)
ORcisconx_osMatch4.1\(2\)e1\(1b\)
ORcisconx_osMatch4.1\(2\)e1\(1d\)
ORcisconx_osMatch4.1\(2\)e1\(1e\)
ORcisconx_osMatch4.1\(2\)e1\(1f\)
ORcisconx_osMatch4.1\(2\)e1\(1g\)
ORcisconx_osMatch4.1\(2\)e1\(1h\)
ORcisconx_osMatch4.1\(2\)e1\(1i\)
ORcisconx_osMatch4.1\(2\)e1\(1j\)
ORcisconx_osMatch4.1\(3\)n1\(1\)
ORcisconx_osMatch4.1\(3\)n1\(1a\)
ORcisconx_osMatch4.1\(3\)n2\(1\)
ORcisconx_osMatch4.1\(3\)n2\(1a\)
ORcisconx_osMatch4.2\(1\)n1\(1\)
ORcisconx_osMatch4.2\(1\)n2\(1\)
ORcisconx_osMatch4.2\(1\)n2\(1a\)
ORcisconx_osMatch5.0\(2\)n1\(1\)
ORcisconx_osMatch5.0\(2\)n2\(1\)
ORcisconx_osMatch5.0\(2\)n2\(1a\)
ORcisconx_osMatch5.0\(3\)n1\(1c\)
ORcisconx_osMatch5.0\(3\)n2\(1\)
ORcisconx_osMatch5.0\(3\)n2\(2\)
ORcisconx_osMatch5.0\(3\)n2\(2a\)
ORcisconx_osMatch5.0\(3\)n2\(2b\)
ORcisconx_osMatch5.0\(3\)u1\(1\)
ORcisconx_osMatch5.0\(3\)u1\(1a\)
ORcisconx_osMatch5.0\(3\)u1\(1b\)
ORcisconx_osMatch5.0\(3\)u1\(1d\)
ORcisconx_osMatch5.0\(3\)u1\(2\)
ORcisconx_osMatch5.0\(3\)u1\(2a\)
ORcisconx_osMatch6.0\(1\)
ORcisconx_osMatch6.0\(2\)
ORcisconx_osMatch6.0\(3\)
ORcisconx_osMatch6.0\(4\)
ORciscounified_computing_systemMatchany
ORciscocg-osMatchany
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | nx_os | 4.1 | cpe:2.3:o:cisco:nx_os:4.1:*:*:*:*:*:*:* |
| cisco | nx_os | 5.0 | cpe:2.3:o:cisco:nx_os:5.0:*:*:*:*:*:*:* |
| cisco | nx_os | 4.2 | cpe:2.3:o:cisco:nx_os:4.2:*:*:*:*:*:*:* |
| cisco | nx_os | 5.1 | cpe:2.3:o:cisco:nx_os:5.1:*:*:*:*:*:*:* |
| cisco | nx_os | 5.2 | cpe:2.3:o:cisco:nx_os:5.2:*:*:*:*:*:*:* |
| cisco | nx_os | 6.1 | cpe:2.3:o:cisco:nx_os:6.1:*:*:*:*:*:*:* |
| cisco | nx_os | 4.0(0)n1 | cpe:2.3:o:cisco:nx_os:4.0\(0\)n1:*:*:*:*:*:*:* |
| cisco | nx_os | 4.0(1a)n1 | cpe:2.3:o:cisco:nx_os:4.0\(1a\)n1:*:*:*:*:*:*:* |
| cisco | nx_os | 4.0(1a)n2 | cpe:2.3:o:cisco:nx_os:4.0\(1a\)n2:*:*:*:*:*:*:* |
| cisco | nx_os | 4.1(2)e1 | cpe:2.3:o:cisco:nx_os:4.1\(2\)e1:*:*:*:*:*:*:* |
Related
securityvulns
securityvulns
Cisco NX-OS multiple security vulnerabilities
2014-05-30 00:00:00
openvas
openvas
nessus
nessus
Cisco NX-OS Multiple Vulnerabilities (cisco-sa-20140521-nxos)
2014-05-30 00:00:00
Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2014-3261)
2023-07-25 00:00:00
Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2013-1191)
2023-07-25 00:00:00
cvelist
cvelist
nvd
nvd
prion
prion
Authentication flaw
2014-05-26 00:25:00
Buffer overflow
2014-05-26 00:25:00
Authentication flaw
2014-05-26 00:25:00
cve
cve
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.002
Percentile
55.4%
Related for CISCO-SA-20140521-NXOS