CVE-2015-0686
published 2015-04-03CVE-2015-0686: The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated…
PriorityP428medium6.3CVSS 2.0
AVNACMAuSCNINAC
EPSS
1.33%
68.1th percentile
The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a denial of service (device reload) via unspecified vectors, aka Bug ID CSCuq92240.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | nx-os | — | — |
CVSS provenance
nvdv2.06.3MEDIUMAV:N/AC:M/Au:S/C:N/I:N/A:C
vendor_cisco6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Nexus 9000 Series Denial of Service Vulnerability
vendor_cisco·2015-04-02·CVSS 6.3
CVE-2015-0686 [MEDIUM] CWE-399 Cisco Nexus 9000 Series Denial of Service Vulnerability
Cisco Nexus 9000 Series Denial of Service Vulnerability
A vulnerability in the SNMP subsystem of Cisco Nexus 9000 software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition.
The vulnerability occurs when the High Availability (HA) policy is set to Reset in the affected software. An authenticated, remote attacker could exploit this vulnerability to cause an affected device to reload unexpectedly, resulting in a DoS condition.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must authenticate to the targeted device. This access requirement decreases the likelihood of a successful exploit.
This vulnerability affects only devices running Cisco Nexus 9000 Series platforms.
Cisco indica
GHSA
GHSA-vx6q-fhp4-277g: The SNMP implementation in Cisco NX-OS 6
ghsa_unreviewed·2022-05-17
CVE-2015-0686 [MEDIUM] GHSA-vx6q-fhp4-277g: The SNMP implementation in Cisco NX-OS 6
The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a denial of service (device reload) via unspecified vectors, aka Bug ID CSCuq92240.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-04-03
Published