CVSS: 4.2EPSS: 0%CPEs: 3788EXPL: 0CVE-2017-6770
https://notcve.org/view.php?id=CVE-2017-6770
07 Aug 2017 — Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability involving the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database. This vulnerability could allow an unauthenticated, remote attacker to take full control of the OSPF Autonomous System (AS) domain routing table, allowing the attacker to intercept or black-hole traffic. The attacker could exploit... • http://www.securityfocus.com/bid/100005 • CWE-20: Improper Input Validation •
CVSS: 7.1EPSS: 1%CPEs: 65EXPL: 0CVE-2016-1454
https://notcve.org/view.php?id=CVE-2016-1454
06 Oct 2016 — Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417. Cisco NX-OS 4.0 hasta la versión 7.3 y 11.0 hasta la versión 11.2 en dispositivos 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700 y 9000 permite a atacantes remotos provocar una denegación ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-bgp • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 2%CPEs: 4891EXPL: 0CVE-2016-1409
https://notcve.org/view.php?id=CVE-2016-1409
29 May 2016 — The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016. El protocolo de implementación Neighbor Discovery (ND) en la pila IPv6 en Cisco IOS XE 2.1 hasta la versión 3.17S, IOS XR 2.0.0 hasta la versión 5.3.2 y NX-OS permite a atacantes remotos provocar una den... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6 • CWE-20: Improper Input Validation •
CVSS: 5.3EPSS: 24%CPEs: 64EXPL: 1CVE-2014-3341
https://notcve.org/view.php?id=CVE-2014-3341
19 Aug 2014 — The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616. El módulo SNMP en Cisco NX-OS 7.0(3)N1(1) y anteriores en los dispositivos Nexus 5000 y 6000 proporciona mensajes de error diferentes para solicitudes inválidas dependiendo de si existe el ID VLAN, lo que permite a atacantes remotos... • https://github.com/ehabhussein/snmpvlan • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 1%CPEs: 34EXPL: 0CVE-2014-3295
https://notcve.org/view.php?id=CVE-2014-3295
14 Jun 2014 — The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309. La implementación HSRP en Cisco NX-OS 6.2(2a) y anteriores permite a atacantes remotos evadir autenticación y causar una denegación de servicio (modificación del estado de pertenencia a un grupo y redirección de trafico hacia un 'agujero negro' -blackhole-) a travé... • http://secunia.com/advisories/59158 • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2014-2201
https://notcve.org/view.php?id=CVE-2014-2201
24 May 2014 — The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a large volume of crafted traffic, aka Bug ID CSCtw98915. Message Transfer Service (MTS) en Cisco NX-OS anterior a 6.2(7) en dispositivos MDS 9000 y 6.0 anterior a 6.0(2) en dispositivos Nexus 7000 permite a atacantes remotos causar una denegación de servicio (referencia a puntero n... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos •
CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2013-6975
https://notcve.org/view.php?id=CVE-2013-6975
20 May 2014 — Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217. Vulnerabilidad de salto de directorio en la interfaz de línea de comando en Cisco NX-OS 6.2(2a) y anteriores permite a usuarios locales leer archivos arbitrarios a través de entradas no especificadas, también conocido como Bug ID CSCul05217. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6975 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 1%CPEs: 101EXPL: 0CVE-2013-6982
https://notcve.org/view.php?id=CVE-2013-6982
08 Jan 2014 — The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174. La implementación de BGP en Cisco NX-OS 6.2 (2a) y anteriores no maneja adecuadamente la interacción de los mensajes de actualización con IPv6, VPNv4 y VPNv6 etiquetados direcciones unicast, que permite a atacantes... • http://osvdb.org/101713 • CWE-20: Improper Input Validation •
CVSS: 4.6EPSS: 0%CPEs: 98EXPL: 0CVE-2012-4135
https://notcve.org/view.php?id=CVE-2012-4135
21 Dec 2013 — Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275. Vulnerabilidad de recorrido de directorios en filesys de Cisco NX-OS 6.1(2) y anteriores permite a usuarios locales acceder a archivos de forma arbitraria a través de argumentos de línea de comandos manipulados durante una acción delete, tambien conocido como Bug I... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4135 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 1%CPEs: 39EXPL: 0CVE-2013-5566
https://notcve.org/view.php?id=CVE-2013-5566
08 Nov 2013 — Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service (supervisor CPU consumption) via Authentication Header (AH) authentication in a Virtual Router Redundancy Protocol (VRRP) frame, aka Bug ID CSCte27874. Cisco NX-OS 5.0 y anteriores versiones en dispositivos MDS 9000 permite a atacantes remotos provocar una denegación de servicio (consumo del supervisor de CPU) a través de la autenticación Authentication Header (AH) en un marco Virtual Router Redundancy Proto... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5566 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •