Priority LOW 22
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected d…
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00185 · Published 2019-05-15 · Fixed in 8.3(1) CWE-347
Priority LOW 31
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected d…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00181 · Published 2019-05-15 · Fixed in 8.3(1) CWE-347
Priority LOW 31
A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credentia…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00263 · Published 2019-05-15 · Fixed in 8.3(1) CWE-347
Priority LOW 32
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00503 · Published 2019-05-15 · Fixed in 8.3(1) CWE-77
Priority LOW 32
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of r…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00477 · Published 2019-05-15 · Fixed in 8.3(1) CWE-77
Priority LOW 32
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege lev…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00477 · Published 2019-05-15 · Fixed in 8.3(1) CWE-77
Priority LOW 32
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00477 · Published 2019-05-15 · Fixed in 8.3(1) CWE-77
Priority LOW 32
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00463 · Published 2019-05-15 · Fixed in 8.3(1) CWE-77
Priority LOW 30
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0045 · Published 2019-05-15 · Fixed in 8.3(1) CWE-77
Priority LOW 32
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00477 · Published 2019-05-15 · Fixed in 8.3(1) CWE-78
Priority LOW 32
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system of an attached line ca…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00477 · Published 2019-05-15 · Fixed in 8.3(1) CWE-78
Priority LOW 35
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00522 · Published 2019-05-15 · Fixed in 8.3(1) CWE-77
Priority LOW 30
A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00402 · Published 2019-05-15 · Fixed in 8.3(1) CWE-264
Priority LOW 20
A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00357 · Published 2019-05-15 · Fixed in 8.3(1) CWE-200
Priority LOW 30
A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use (TOCTOU) race con…
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00357 · Published 2019-05-15 · Fixed in 8.3(1) CWE-78
Priority LOW 26
A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interfac…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00885 · Published 2019-05-15 · Fixed in 8.3(1) CWE-79
Priority LOW 31
A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the pri…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00244 · Published 2019-05-15 · Fixed in 8.3(1) CWE-347
Priority LOW 28
A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system f…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00229 · Published 2019-05-15 · Fixed in 8.3(1) CWE-20