CVE-2015-4234: High severity cisco nx-os vulnerability

Published Jul 3, 2015

Updated

Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127.

Affected Software

2 affected components

Cisco NX-OS=6.0\(2\)

Cisco NX-OS=6.2\(2\)

Event History

Jul 3, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4234?

CVE-2015-4234 is classified as a high severity vulnerability that allows local users to gain root access.

How do I fix CVE-2015-4234?

To remediate CVE-2015-4234, upgrade your Cisco NX-OS to a version that is not affected, specifically above 6.2(2).

Who is affected by CVE-2015-4234?

CVE-2015-4234 affects users running Cisco NX-OS versions 6.0(2) and 6.2(2) on Nexus devices.

What is the impact of CVE-2015-4234?

The impact of CVE-2015-4234 is that an attacker can exploit the vulnerability to obtain unauthorized root access.

What systems are vulnerable to CVE-2015-4234?

Vulnerable systems include Cisco Nexus devices operating with specific configurations of NX-OS version 6.0(2) and 6.2(2).