CVE Catalog

CVE-2016-1341

Critical
Published: Translated: NVD NIST

Summary

Cisco Nexus 2000 Fabric Extender devices running NX-OS versions 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) have a blank root password, allowing local users to gain privileges via unspecified vectors.

Risk Assessment

The lack of a root password poses a significant security risk, enabling unauthorized users to access the system and potentially take control of the device.

Recommendation

It is recommended to immediately set a strong password for the root account on all affected devices to minimize the risk of unauthorized access.

Original NVD description (English source)

Cisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS