CVE-2015-0721: Critical severity Cisco NX-OS vulnerability
Published Oct 6, 2016
·Updated
Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.
Affected Software
233 affected components
Cisco NX-OS=4.1.\(2\)
Cisco NX-OS=4.1.\(3\)
Cisco NX-OS=4.1.\(4\)
Cisco NX-OS=4.1.\(5\)
Cisco NX-OS=4.2\(3\)
Cisco NX-OS=4.2\(4\)
Cisco NX-OS=4.2\(6\)
Cisco NX-OS=4.2\(8\)
Cisco NX-OS=4.2.\(2a\)
Cisco NX-OS=5.0\(2a\)
Cisco NX-OS=5.0\(3\)
Cisco NX-OS=5.0\(5\)
Cisco NX-OS=5.1\(1\)
Cisco NX-OS=5.1\(1a\)
Cisco NX-OS=5.1\(3\)
Cisco NX-OS=5.1\(4\)
Cisco NX-OS=5.1\(5\)
Cisco NX-OS=5.1\(6\)
Cisco NX-OS=5.2\(1\)
Cisco NX-OS=5.2\(3a\)
Cisco NX-OS=5.2\(4\)
Cisco NX-OS=5.2\(5\)
Cisco NX-OS=5.2\(7\)
Cisco NX-OS=5.2\(9\)
Cisco NX-OS=6.0\(1\)
Cisco NX-OS=6.0\(2\)
Cisco NX-OS=6.0\(3\)
Cisco NX-OS=6.0\(4\)
Cisco NX-OS=6.1\(1\)
Cisco NX-OS=6.1\(2\)
Cisco NX-OS=6.1\(3\)
Cisco NX-OS=6.1\(4\)
Cisco NX-OS=6.1\(4a\)
Cisco NX-OS=6.2\(2\)
Cisco NX-OS=6.2\(2a\)
Cisco NX-OS=6.2\(6\)
Cisco NX-OS=6.2\(6b\)
Cisco NX-OS=6.2\(8\)
Cisco NX-OS=6.2\(8a\)
Cisco NX-OS=6.2\(8b\)
Cisco NX-OS=6.2\(10\)
Cisco NX-OS=base
Cisco Nexus 7000 10-slot
Cisco Nexus 7000 18-slot
Cisco Nexus 7000 4-slot
Cisco Nexus 7000 9-slot
Cisco Nexus 7700 10-slot
Cisco Nexus 7700 18-slot
Cisco Nexus 7700 2-slot
Cisco Nexus 7700 6-slot
Cisco NX-OS=4.1\(2\)e1\(1\)
Cisco NX-OS=4.1\(2\)e1\(1b\)
Cisco NX-OS=4.1\(2\)e1\(1d\)
Cisco NX-OS=4.1\(2\)e1\(1e\)
Cisco NX-OS=4.1\(2\)e1\(1f\)
Cisco NX-OS=4.1\(2\)e1\(1g\)
Cisco NX-OS=4.1\(2\)e1\(1h\)
Cisco NX-OS=4.1\(2\)e1\(1i\)
Cisco NX-OS=4.1\(2\)e1\(1j\)
Cisco Nexus 4001i
Cisco NX-OS=4.0\(0\)n1\(1a\)
Cisco NX-OS=4.0\(0\)n1\(2\)
Cisco NX-OS=4.0\(0\)n1\(2a\)
Cisco NX-OS=4.0\(1a\)n1\(1\)
Cisco NX-OS=4.0\(1a\)n1\(1a\)
Cisco NX-OS=4.0\(1a\)n2\(1\)
Cisco NX-OS=4.0\(1a\)n2\(1a\)
Cisco NX-OS=4.1\(3\)n1\(1\)
Cisco NX-OS=4.1\(3\)n1\(1a\)
Cisco NX-OS=4.1\(3\)n2\(1\)
Cisco NX-OS=4.1\(3\)n2\(1a\)
Cisco NX-OS=4.2\(1\)n1\(1\)
Cisco NX-OS=4.2\(1\)n2\(1\)
Cisco NX-OS=4.2\(1\)n2\(1a\)
Cisco NX-OS=5.0\(2\)n1\(1\)
Cisco NX-OS=5.0\(2\)n2\(1\)
Cisco NX-OS=5.0\(2\)n2\(1a\)
Cisco NX-OS=5.0\(3\)n1\(1c\)
Cisco NX-OS=5.0\(3\)n2\(1\)
Cisco NX-OS=5.0\(3\)n2\(2\)
Cisco NX-OS=5.0\(3\)n2\(2a\)
Cisco NX-OS=5.0\(3\)n2\(2b\)
Cisco NX-OS=5.1\(3\)n1\(1\)
Cisco NX-OS=5.1\(3\)n1\(1a\)
Cisco NX-OS=5.1\(3\)n2\(1\)
Cisco NX-OS=5.1\(3\)n2\(1a\)
Cisco NX-OS=5.1\(3\)n2\(1b\)
Cisco NX-OS=5.1\(3\)n2\(1c\)
Cisco NX-OS=5.2\(1\)n1\(1\)
Cisco NX-OS=5.2\(1\)n1\(1a\)
Cisco NX-OS=5.2\(1\)n1\(1b\)
Cisco NX-OS=5.2\(1\)n1\(2\)
Cisco NX-OS=5.2\(1\)n1\(2a\)
Cisco NX-OS=5.2\(1\)n1\(3\)
Cisco NX-OS=5.2\(1\)n1\(4\)
Cisco NX-OS=5.2\(1\)n1\(5\)
Cisco NX-OS=5.2\(1\)n1\(6\)
Cisco NX-OS=5.2\(1\)n1\(7\)
Cisco NX-OS=5.2\(1\)n1\(8\)
Cisco NX-OS=5.2\(1\)n1\(8a\)
Cisco NX-OS=6.0\(2\)n1\(1\)
Cisco NX-OS=6.0\(2\)n1\(2\)
Cisco NX-OS=6.0\(2\)n1\(2a\)
Cisco NX-OS=6.0\(2\)n2\(1\)
Cisco NX-OS=6.0\(2\)n2\(1b\)
Cisco NX-OS=6.0\(2\)n2\(2\)
Cisco NX-OS=6.0\(2\)n2\(4\)
Cisco NX-OS=6.0\(2\)n2\(5\)
Cisco NX-OS=7.0\(0\)n1\(1\)
Cisco NX-OS=7.0\(1\)n1\(1\)
Cisco NX-OS=7.0\(2\)n1\(1\)
Cisco NX-OS=7.0\(3\)n1\(1\)
Cisco Nexus 5010
Cisco Nexus 5020
Cisco Nexus 5548p
Cisco Nexus 5548up
Cisco Nexus 5596t
Cisco Nexus 5596up
Cisco Nexus 56128p
Cisco Nexus 5624q
Cisco Nexus 5648q
Cisco Nexus 5672up
Cisco Nexus 5672up-16g
Cisco Nexus 5696q
Cisco NX-OS=6.0\(2\)n2\(3\)
Cisco Nexus 6001
Cisco Nexus 6004
Cisco NX-OS=4.0\(4\)sv1\(1\)
Cisco NX-OS=4.0\(4\)sv1\(2\)
Cisco NX-OS=4.0\(4\)sv1\(3\)
Cisco NX-OS=4.0\(4\)sv1\(3a\)
Cisco NX-OS=4.0\(4\)sv1\(3b\)
Cisco NX-OS=4.0\(4\)sv1\(3c\)
Cisco NX-OS=4.0\(4\)sv1\(3d\)
Cisco NX-OS=4.2\(1\)sv1\(4\)
Cisco NX-OS=4.2\(1\)sv1\(4a\)
Cisco NX-OS=4.2\(1\)sv1\(4b\)
Cisco NX-OS=4.2\(1\)sv1\(5.1\)
Cisco NX-OS=4.2\(1\)sv1\(5.1a\)
Cisco NX-OS=4.2\(1\)sv1\(5.2\)
Cisco NX-OS=4.2\(1\)sv1\(5.2b\)
Cisco NX-OS=4.2\(1\)sv2\(1.1\)
Cisco NX-OS=4.2\(1\)sv2\(1.1a\)
Cisco NX-OS=4.2\(1\)sv2\(2.1\)
Cisco NX-OS=4.2\(1\)sv2\(2.1a\)
Cisco NX-OS=5.2\(1\)sm1\(5.1\)
Cisco Nexus 1000v For Microsoft Hyper-v
Cisco Nexus 1000v For Vmware Vsphere
Cisco NX-OS=5.0\(3\)u1\(1\)
Cisco NX-OS=5.0\(3\)u1\(1a\)
Cisco NX-OS=5.0\(3\)u1\(1b\)
Cisco NX-OS=5.0\(3\)u1\(1d\)
Cisco NX-OS=5.0\(3\)u1\(2\)
Cisco NX-OS=5.0\(3\)u1\(2a\)
Cisco NX-OS=5.0\(3\)u2\(1\)
Cisco NX-OS=5.0\(3\)u2\(2\)
Cisco NX-OS=5.0\(3\)u2\(2a\)
Cisco NX-OS=5.0\(3\)u2\(2b\)
Cisco NX-OS=5.0\(3\)u2\(2c\)
Cisco NX-OS=5.0\(3\)u2\(2d\)
Cisco NX-OS=5.0\(3\)u3\(1\)
Cisco NX-OS=5.0\(3\)u3\(2\)
Cisco NX-OS=5.0\(3\)u3\(2a\)
Cisco NX-OS=5.0\(3\)u3\(2b\)
Cisco NX-OS=5.0\(3\)u4\(1\)
Cisco NX-OS=5.0\(3\)u5\(1\)
Cisco NX-OS=5.0\(3\)u5\(1a\)
Cisco NX-OS=5.0\(3\)u5\(1b\)
Cisco NX-OS=5.0\(3\)u5\(1c\)
Cisco NX-OS=5.0\(3\)u5\(1e\)
Cisco NX-OS=5.0\(3\)u5\(1f\)
Cisco NX-OS=5.0\(3\)u5\(1g\)
Cisco NX-OS=5.0\(3\)u5\(1h\)
Cisco NX-OS=6.0\(2\)u1\(1\)
Cisco NX-OS=6.0\(2\)u1\(1a\)
Cisco NX-OS=6.0\(2\)u1\(2\)
Cisco NX-OS=6.0\(2\)u1\(3\)
Cisco NX-OS=6.0\(2\)u1\(4\)
Cisco NX-OS=6.0\(2\)u2\(1\)
Cisco NX-OS=6.0\(2\)u2\(2\)
Cisco NX-OS=6.0\(2\)u2\(3\)
Cisco NX-OS=6.0\(2\)u2\(4\)
Cisco NX-OS=6.0\(2\)u2\(5\)
Cisco NX-OS=6.0\(2\)u2\(6\)
Cisco NX-OS=6.0\(2\)u3\(1\)
Cisco NX-OS=6.0\(2\)u3\(2\)
Cisco NX-OS=6.0\(2\)u3\(3\)
Cisco NX-OS=6.0\(2\)u3\(4\)
Cisco NX-OS=6.0\(2\)u3\(5\)
Cisco NX-OS=6.0\(2\)u4\(1\)
Cisco NX-OS=6.0\(2\)u4\(2\)
Cisco NX-OS=6.0\(2\)u4\(3\)
Cisco NX-OS=6.0\(2\)u5\(1\)
Cisco Nexus 3016
Cisco Nexus 3048
Cisco Nexus 31108pc-v
Cisco Nexus 31108tc-v
Cisco Nexus 31128pq
Cisco Nexus 3132q
Cisco Nexus 3132q-v
Cisco Nexus 3164q
Cisco Nexus 3172
Cisco Nexus 3232c
Cisco Nexus 3264q
Cisco Nexus 3524
Cisco Nexus 3548
Cisco NX-OS=6.1\(2\)i2\(1\)
Cisco NX-OS=6.1\(2\)i2\(2\)
Cisco NX-OS=6.1\(2\)i2\(2a\)
Cisco NX-OS=6.1\(2\)i2\(2b\)
Cisco NX-OS=6.1\(2\)i2\(3\)
Cisco NX-OS=6.1\(2\)i3\(1\)
Cisco NX-OS=6.1\(2\)i3\(2\)
Cisco NX-OS=6.1\(2\)i3\(3\)
Cisco NX-OS=11.0\(1b\)
Cisco NX-OS=11.0\(1c\)
Cisco Nexus 92160yc-x
Cisco Nexus 92304qc
Cisco Nexus 9236c
Cisco Nexus 9272q
Cisco Nexus 93108tc-ex
Cisco Nexus 93120tx
Cisco Nexus 93128tx
Cisco Nexus 93180yc-ex
Cisco Nexus 9332pq
Cisco Nexus 9336pq Aci Spine
Cisco Nexus 9372px
Cisco Nexus 9372tx
Cisco Nexus 9396px
Cisco Nexus 9396tx
Cisco Nexus 9504
Cisco Nexus 9508
Cisco Nexus 9516
Event History
Oct 6, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0721?
CVE-2015-0721 has a CVSS score indicating it is of high severity due to its potential to allow unauthorized privileged access.
2
How do I fix CVE-2015-0721?
To fix CVE-2015-0721, update the affected Cisco NX-OS software to a version that has addressed this security vulnerability.
3
Which versions of Cisco NX-OS are affected by CVE-2015-0721?
CVE-2015-0721 affects Cisco NX-OS versions from 4.0 through 7.3 on various Nexus device models.
4
What types of devices are vulnerable to CVE-2015-0721?
CVE-2015-0721 affects various Cisco Nexus devices, including the Multilayer Director and models such as Nexus 1000V, 2000, 3000, and more.
5
Can CVE-2015-0721 lead to unauthorized access?
Yes, CVE-2015-0721 can allow remote authenticated users to bypass AAA restrictions, potentially leading to unauthorized privileged CLI access.