10

CVE-2016-1329

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ X14j Firmware Versiont-ms14jakucb-1102.5
   Cisco ≫ Nexus 3048 Version-
   Cisco ≫ Nexus 3064 Version-
   Cisco ≫ Nexus 3064t Version-
   Cisco ≫ Nexus 3064x Version-
Sun ≫ Opensolaris Versionsnv_124 Editionsparc
   Cisco ≫ Nexus 3048 Version-
   Cisco ≫ Nexus 3064 Version-
   Cisco ≫ Nexus 3064t Version-
   Cisco ≫ Nexus 3064x Version-
Zyxel ≫ Gs1900-10hp Firmware Version < 2.50\(aazi.0\)c0
   Cisco ≫ Nexus 3048 Version-
   Cisco ≫ Nexus 3064 Version-
   Cisco ≫ Nexus 3064t Version-
   Cisco ≫ Nexus 3064x Version-
Zzinc ≫ Keymouse Firmware Version3.08 SwPlatformwindows
   Cisco ≫ Nexus 3048 Version-
   Cisco ≫ Nexus 3064 Version-
   Cisco ≫ Nexus 3064t Version-
   Cisco ≫ Nexus 3064x Version-
Samsung ≫ X14j Firmware Versiont-ms14jakucb-1102.5
   Cisco ≫ Nexus 3524 Version-
   Cisco ≫ Nexus 3548 Version-
Sun ≫ Opensolaris Versionsnv_124 Editionsparc
   Cisco ≫ Nexus 3524 Version-
   Cisco ≫ Nexus 3548 Version-
Zyxel ≫ Gs1900-10hp Firmware Version < 2.50\(aazi.0\)c0
   Cisco ≫ Nexus 3524 Version-
   Cisco ≫ Nexus 3548 Version-
Zzinc ≫ Keymouse Firmware Version3.08 SwPlatformwindows
   Cisco ≫ Nexus 3524 Version-
   Cisco ≫ Nexus 3548 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.07% 0.832
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.