Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Priority LOW 22

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected d…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00185 Published 2019-05-15 Fixed in 8.3(1) CWE-347
Priority LOW 31

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected d…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00181 Published 2019-05-15 Fixed in 8.3(1) CWE-347
Priority LOW 31

A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credentia…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00263 Published 2019-05-15 Fixed in 8.3(1) CWE-347
Priority LOW 32

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00503 Published 2019-05-15 Fixed in 8.3(1) CWE-77
Priority LOW 32

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of r…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00477 Published 2019-05-15 Fixed in 8.3(1) CWE-77
Priority LOW 32

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege lev…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00477 Published 2019-05-15 Fixed in 8.3(1) CWE-77
Priority LOW 32

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00477 Published 2019-05-15 Fixed in 8.3(1) CWE-77
Priority LOW 32

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00463 Published 2019-05-15 Fixed in 8.3(1) CWE-77
Priority LOW 30

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0045 Published 2019-05-15 Fixed in 8.3(1) CWE-77
Priority LOW 32

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00477 Published 2019-05-15 Fixed in 8.3(1) CWE-78
Priority LOW 32

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system of an attached line ca…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00477 Published 2019-05-15 Fixed in 8.3(1) CWE-78
Priority LOW 35

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00522 Published 2019-05-15 Fixed in 8.3(1) CWE-77
Priority LOW 30

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00402 Published 2019-05-15 Fixed in 8.3(1) CWE-264
Priority LOW 20

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00357 Published 2019-05-15 Fixed in 8.3(1) CWE-200
Priority LOW 30

A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use (TOCTOU) race con…

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00357 Published 2019-05-15 Fixed in 8.3(1) CWE-78
Priority LOW 26

A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interfac…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00885 Published 2019-05-15 Fixed in 8.3(1) CWE-79
Priority LOW 31

A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the pri…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00244 Published 2019-05-15 Fixed in 8.3(1) CWE-347
Priority LOW 28

A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system f…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00229 Published 2019-05-15 Fixed in 8.3(1) CWE-20