Lucene search

[email protected]CVE-2016-1329

HistoryMar 03, 2016 - 11:59 a.m.

CVE-2016-1329

2016-03-0311:59:00

CWE-287

[email protected]

web.nvd.nist.gov

cisco

nx-os

nexus

hardcoded credentials

remote attack

telnet

ssh

cve-2016-1329

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

Affected configurations

NVD

Node

cisconexus_3048Match-

cisconexus_3064Match-

cisconexus_3064tMatch-

cisconexus_3064xMatch-

AND

samsungx14j_firmwareMatcht-ms14jakucb-1102.5

sunopensolarisMatchsnv_124sparc

zyxelgs1900-10hp_firmwareRange<2.50\(aazi.0\)c0

zzinckeymouse_firmwareMatch3.08windows

Node

cisconexus_3524Match-

cisconexus_3548Match-

AND

samsungx14j_firmwareMatcht-ms14jakucb-1102.5

sunopensolarisMatchsnv_124sparc

zyxelgs1900-10hp_firmwareRange<2.50\(aazi.0\)c0

zzinckeymouse_firmwareMatch3.08windows

CPENameOperatorVersion
samsung:x14j_firmwaresamsung x14j firmwareeqt-ms14jakucb-1102.5
sun:opensolarissun opensolariseqsnv_124
zyxel:gs1900-10hp_firmwarezyxel gs1900-10hp firmwarelt2.50\(aazi.0\)c0
zzinc:keymouse_firmwarezzinc keymouse firmwareeq3.08

CPE	Name	Operator	Version
samsung:x14j_firmware	samsung x14j firmware	eq	t-ms14jakucb-1102.5
sun:opensolaris	sun opensolaris	eq	snv_124
zyxel:gs1900-10hp_firmware	zyxel gs1900-10hp firmware	lt	2.50\(aazi.0\)c0
zzinc:keymouse_firmware	zzinc keymouse firmware	eq	3.08

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n3k

www.securitytracker.com/id/1035161

isc.sans.edu/forums/diary/20795

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Related for CVE-2016-1329

openvas1 prion1 cvelist1 nessus1 nvd1 cisco1