CVE-2015-0721: Cisco NX-OS

High severity, CVSS 8.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.

Affected products

• Cisco NX-OS: version 4.1.(2) only; version 4.1.(3) only; version 4.1.(4) only; version 4.1.(5) only; version 4.2(3) only; version 4.2(4) only; …

Published 2016-10-06. Last modified 2026-06-17.