Read the docs
TI-2015-03628 Aliases CVE-2015-4323GHSA-f846-7hhm-3qxh

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9)…

Priority LOW 29CWE-119Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices 4.1(2)E1(1b); Nexus 7000 devices 6.2(14)S1; Nexus 9000 devices 7.3(0)ZN(0.9); and MDS 9000 devices 6.2 (13) and 7.1(0)ZN(91.99) and MDS SAN-OS 7.1(0)ZN(91.99) allows remote attackers to cause a denial of service (device outage) via a crafted ARP packet, related to incorrect MTU validation, aka Bug IDs CSCuv71933, CSCuv61341, CSCuv61321, CSCuu78074, CSCut37060, CSCuv61266, CSCuv61351, CSCuv61358, and CSCuv61366.

Why it matters now

EPSS 0.00979 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 34

CPEVersionsRoleVendor
cpe:2.3:o:cisco:nx-os:6.2\(14\)s1:*:*:*:*:*:*:*6.2(14)s1VulnerableCisco
cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:nx-os:6.0\(2\)u5\(1.41\):*:*:*:*:*:*:*6.0(2)u5(1.41)VulnerableCisco
cpe:2.3:o:cisco:nx-os:7.0\(3\)i2\(0.373\):*:*:*:*:*:*:*7.0(3)i2(0.373)VulnerableCisco
cpe:2.3:o:cisco:nx-os:7.3\(0\)zn\(0.83\):*:*:*:*:*:*:*7.3(0)zn(0.83)VulnerableCisco
cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_31128pq:*:*:*:*:*:*:*:*all versionsRunning onCisco
  • cpe:2.3:o:cisco:nx-os:6.2\(14\)s1:*:*:*:*:*:*:* Versions 6.2(14)s1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.0\(2\)u5\(1.41\):*:*:*:*:*:*:* Versions 6.0(2)u5(1.41) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:7.0\(3\)i2\(0.373\):*:*:*:*:*:*:* Versions 7.0(3)i2(0.373) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:7.3\(0\)zn\(0.83\):*:*:*:*:*:*:* Versions 7.3(0)zn(0.83) Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_31128pq:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
Show 24 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:nx-os:7.3\(0\)zn\(0.9\):*:*:*:*:*:*:*7.3(0)zn(0.9)VulnerableCisco
cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:mds_9000_nx-os:6.2\(13\):*:*:*:*:*:*:*6.2(13)VulnerableCisco
cpe:2.3:o:cisco:mds_9000_nx-os:7.1\(0\)zn\(91.99\):*:*:*:*:*:*:*7.1(0)zn(91.99)VulnerableCisco
cpe:2.3:a:cisco:nexus_1000v:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:nx-os:4.1\(2\)e1\(1b\):*:*:*:*:*:*:*4.1(2)e1(1b)VulnerableCisco
cpe:2.3:h:cisco:nexus_4001i:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:nx-os:7.3\(0\)zn\(0.9\):*:*:*:*:*:*:* Versions 7.3(0)zn(0.9) Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:mds_9000_nx-os:6.2\(13\):*:*:*:*:*:*:* Versions 6.2(13) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:mds_9000_nx-os:7.1\(0\)zn\(91.99\):*:*:*:*:*:*:* Versions 7.1(0)zn(91.99) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:nexus_1000v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:nx-os:4.1\(2\)e1\(1b\):*:*:*:*:*:*:* Versions 4.1(2)e1(1b) Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_4001i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-4323
  2. 2026-10-03 Alias added: GHSA-f846-7hhm-3qxh

References

Advisory 1

  • TI-2017-04414 Memory corruption in Cisco NX-OS Software Fibre Channel over Ethernet CVSS 3.1MEDIUM 6.5
  • TI-2015-00723 The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices… CVSS 2.0MEDIUM 5.0
  • TI-2012-01191 The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences