Skip to content
OpenAdvisories
High WID-SEC-2024-1949 7 CVEs

Cisco NX-OS: Mehrere Schwachstellen

Published Aug 28, 2024 · Updated Aug 28, 2024 · de-DE

Vendor: Cisco Product: MDS 9000 Product: Nexus Product: NX-OS Product: Unified Computing System (UCS)

Summary

Ein lokaler oder entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco NX-OS ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Rechte zu erlangen und einen Denial-of-Service-Zustand zu erzeugen.

Product

Cisco NX-OS ist ein Data Center Netzwerk-Betriebssystem für virtualisierte Rechenzentren. NX-OS wurde für Ethernet Switches der Nexus Serie und Fibre Channel Storage Area Network Swiches der MDS Serie entwickelt.

Vulnerabilities 7

  • High 8.6
    CVE-2024-20446

    Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability

    A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in a DHCPv6…

    Cisco Cisco NX-OS Software Network devices
  • Medium 6.7
    CVE-2024-20411

    Cisco NX-OS Bash Arbitrary Code Execution Vulnerability

    A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code as root on an affected device. This vulnerability is due to insufficient security restrictions when ex…

    Cisco Cisco NX-OS Software Network devices
  • Medium 6.7
    CVE-2024-20413

    Cisco NX-OS Bash Privilege Escalation Vulnerability

    A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when ex…

    Cisco Cisco NX-OS Software Network devices
  • Medium 5.3
    CVE-2024-20284

    Cisco NX-OS Software Python Parser Escape Vulnerability

    A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due…

    Cisco Cisco NX-OS Software Network devices
  • Medium 5.3
    CVE-2024-20285

    Cisco NX-OS Software Python Parser Escape Vulnerability

    A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due…

    Cisco Cisco NX-OS Software Network devices
  • Medium 5.3
    CVE-2024-20286

    Cisco NX-OS Software Python Parser Escape Vulnerability

    A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due…

    Cisco Cisco NX-OS Software Network devices
  • Medium 4.4
    CVE-2024-20289

    Cisco NX-OS Software Command Injection Vulnerability

    A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device.  This vulnerability is due to insufficient validation …

    Cisco Cisco NX-OS Software Cisco NX-OS System Software in ACI Mode Network devices

Revision history

  1. #1

    Initiale Fassung

References