Cisco Nexus 7000 10-Slot vulnerabilities

13 CVEs affecting Cisco Nexus 7000 10-Slot, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3261, published 2014-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-1180, published 2013-04-25. High severity, CVSS 9.0. EPSS: 3.4% chance of exploitation in the next 30 days. Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote…
CVE-2013-1179, published 2013-04-25. High severity, CVSS 9.0. EPSS: 3.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x…
CVE-2012-4090, published 2013-10-05. Medium severity, CVSS 4.0. EPSS: 2.1% chance of exploitation in the next 30 days. The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID…
CVE-2014-3261, published 2014-05-26. High severity, CVSS 7.6. EPSS: 2% chance of exploitation in the next 30 days. Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on Nexus 3000 devices,…
CVE-2014-2201, published 2014-05-26. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer…
CVE-2013-1191, published 2014-05-26. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted…
CVE-2012-2469, published 2012-08-06. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows remote attackers to cause a denial of service (device reset)…
CVE-2013-1178, published 2013-04-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x…
CVE-2012-0352, published 2012-02-16. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before…
CVE-2012-6396, published 2013-01-19. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a…

Latest

CVE-2014-0684, published 2014-05-07. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136.
CVE-2013-1226, published 2013-04-29. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a crafted frame, aka…