CVE Catalog

CVE-2016-1329

Critical
Published: Translated: NVD NIST

Summary

Cisco Nexus 3000 and 3500 devices running NX-OS versions 6.0(2)U6(1) to 6.0(2)U6(5) and 6.0(2)A6(1) to 6.0(2)A6(5) and 6.0(2)A7(1) contain hardcoded credentials. This allows remote attackers to gain root privileges via a TELNET or SSH session.

Risk Assessment

Exploitation of this vulnerability could lead to complete control over network devices, posing a significant threat to the security of the organization's IT infrastructure.

Recommendation

It is recommended to update the NX-OS software to the latest version to eliminate hardcoded credentials and implement additional security measures, such as restricting access to TELNET and SSH sessions.

Original NVD description (English source)

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS