CVE-2016-1329

CRITICAL · 9.8 CVSS Gepubliceerd: 03-03-2016 CWE-287

Beschrijving

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

Vendors

Cisco Samsung Sun Zyxel Zzinc

Affected products

Nexus 3048 Nexus 3064 Nexus 3064t Nexus 3064x X14j Firmware Opensolaris Gs1900-10hp Firmware Keymouse Firmware Nexus 3524 Nexus 3548

References

tools.cisco.com
www.securitytracker.com
isc.sans.edu