CVE-2016-1329
CriticalSummary
Cisco Nexus 3000 and 3500 devices running NX-OS versions 6.0(2)U6(1) to 6.0(2)U6(5) and 6.0(2)A6(1) to 6.0(2)A6(5) and 6.0(2)A7(1) contain hardcoded credentials. This allows remote attackers to gain root privileges via a TELNET or SSH session.
Risk Assessment
Exploitation of this vulnerability could lead to complete control over network devices, posing a significant threat to the security of the organization's IT infrastructure.
Recommendation
It is recommended to update the NX-OS software to the latest version to eliminate hardcoded credentials and implement additional security measures, such as restricting access to TELNET and SSH sessions.
Original NVD description (English source)
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

