Cisco Mds 9000 vulnerabilities

10 CVEs affecting Cisco Mds 9000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6277, published 2015-09-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2005-3669, published 2005-11-18. Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via…
CVE-2013-1180, published 2013-04-25. High severity, CVSS 9.0. EPSS: 3.4% chance of exploitation in the next 30 days. Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote…
CVE-2013-1179, published 2013-04-25. High severity, CVSS 9.0. EPSS: 3.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x…
CVE-2013-1192, published 2013-04-25. High severity, CVSS 9.3. EPSS: 2.4% chance of exploitation in the next 30 days. The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows…
CVE-2014-2201, published 2014-05-26. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer…
CVE-2013-1178, published 2013-04-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x…
CVE-2015-6277, published 2015-09-02. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and…