Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2015-0658

HIGH · 7.9 CVSS Gepubliceerd: CWE-20

Beschrijving

The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.

Vendors

Cisco

Affected products

Nx-os Nexus 7000 Nexus 7700 Nexus 5010 Nexus 5020 Nexus 5548p Nexus 5548up Nexus 5596t Nexus 5596up Nexus 56128p Nexus 5624q Nexus 5648q Nexus 5672up Nexus 5696q Nexus 6001 Nexus 6004 Nexus 93120tx Nexus 93128tx Nexus 9332pq Nexus 9336pq Aci Spine Nexus 9372px Nexus 9372tx Nexus 9396px Nexus 9396tx Nexus 9504 Nexus 9508 Nexus 9516 Nexus 3016 Nexus 3048 Nexus 3064 Nexus 3132q Nexus 3164q Nexus 3172 Nexus 3524 Nexus 3548

References