CVE-2015-4232: Medium severity cisco nx-os vulnerability
Published Jul 3, 2015
·Updated
Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.
Affected Software
16 affected components
Cisco NX-OS=6.2\(10\)
Cisco Mds 9100
Cisco Mds 9200
Cisco Mds 9500
Cisco Mds 9700
Cisco Nexus 93120tx
Cisco Nexus 93128tx
Cisco Nexus 9332pq
Cisco Nexus 9336pq Aci Spine
Cisco Nexus 9372px
Cisco Nexus 9372tx
Cisco Nexus 9396px
Cisco Nexus 9396tx
Cisco Nexus 9504
Cisco Nexus 9508
Cisco Nexus 9516
Event History
Jul 3, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4232?
The severity of CVE-2015-4232 is classified as high due to the ability for local users to execute arbitrary OS commands.
2
How do I fix CVE-2015-4232?
To fix CVE-2015-4232, upgrade Cisco NX-OS to a version that is not vulnerable, specifically to a version beyond 6.2(10).
3
What systems are affected by CVE-2015-4232?
CVE-2015-4232 affects Cisco NX-OS 6.2(10) specifically on Nexus and MDS 9000 devices.
4
Is CVE-2015-4232 exploitable remotely?
CVE-2015-4232 is not remotely exploitable as it requires local access for exploitation.
5
What impact does CVE-2015-4232 have on affected devices?
CVE-2015-4232 allows local users to execute arbitrary OS commands, potentially compromising the device's integrity.