CVE-2016-1329

published 2016-03-03

CVE-2016-1329: Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cisco	nexus_3000_series_and_3500_platform_switches	—	—
samsung	x14j_firmware	—	—
sun	opensolaris	—	—
zyxel	gs1900-10hp_firmware	< 2.50\(aazi.0\)c0	2.50\(aazi.0\)c0
zzinc	keymouse_firmware	—	—

CWE-287