CVE-2015-4234
HighSummary
Cisco NX-OS versions 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, allowing local users to obtain root access via unspecified input to the Python interpreter.
Risk Assessment
The improper configuration may lead to unauthorized access to the system, posing a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to update to the latest version of NX-OS and review the system configuration to secure against unauthorized access.
Other vulnerabilities in Cisco NX-OS
See all- CVE-2016-1455High
Cisco NX-OS versions before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) have an incorrect iptables local-interface configuration, allowing remote attackers to obtain sensitive information via TCP or UDP traffic.
- CVE-2015-0658High
The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, allowing remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network.
Original NVD description (English source)
Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127.