CVE-2016-1329
First published: Thu Mar 03 2016(Updated: )
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Nexus 3048 Firmware | ||
| Cisco Nexus 3064 Firmware | ||
| Cisco Nexus 3064 | ||
| Cisco Nexus 3064-X Firmware | ||
| Samsung X14J eu | =t-ms14jakucb-1102.5 | |
| Oracle Solaris and Zettabyte File System (ZFS) | =snv_124 | |
| Zyxel GS1900-10HP firmware | <2.50\(aazi.0\)c0 | |
| zzinc KeyMouse | =3.08 | |
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3548-X/XL Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-1329?
CVE-2016-1329 has a critical severity level due to the exposure of hardcoded credentials allowing unauthorized access.
How do I fix CVE-2016-1329?
To mitigate CVE-2016-1329, upgrade to a non-vulnerable version of the Cisco NX-OS operating system.
What devices are affected by CVE-2016-1329?
CVE-2016-1329 affects Cisco Nexus 3000 and 3500 series devices running specific versions of NX-OS.
Can CVE-2016-1329 be exploited remotely?
Yes, CVE-2016-1329 can be exploited remotely via TELNET or SSH sessions due to hardcoded credentials.
What are the potential consequences of CVE-2016-1329?
Exploitation of CVE-2016-1329 can lead to unauthorized root access, allowing attackers to take full control of the affected devices.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco nexus 3048 firmware
- canonical/cisco nexus 3064 firmware
- canonical/cisco nexus 3064
- canonical/cisco nexus 3064-x firmware
- vendor/samsung
- canonical/samsung x14j eu
- version/samsung x14j eu/t-ms14jakucb-1102.5
- vendor/sun
- canonical/oracle solaris and zettabyte file system (zfs)
- version/oracle solaris and zettabyte file system (zfs)/snv_124
- vendor/zyxel
- canonical/zyxel gs1900-10hp firmware
- vendor/zzinc
- canonical/zzinc keymouse
- version/zzinc keymouse/3.08
- canonical/cisco nexus 3524-xl
- canonical/cisco nexus 3548-x/xl firmware