CVE-2016-1329
published 2016-03-03CVE-2016-1329: Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded…
PriorityP359critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
3.74%
88.6th percentile
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | nexus_3000_series_and_3500_platform_switches | — | — |
| samsung | x14j_firmware | — | — |
| sun | opensolaris | — | — |
| zyxel | gs1900-10hp_firmware | < 2.50\(aazi.0\)c0 | 2.50\(aazi.0\)c0 |
| zzinc | keymouse_firmware | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
vendor_cisco·2016-03-03·CVSS 10.0
CVE-2016-1329 [CRITICAL] CWE-287 Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access.
The vulnerability is due to a user account that has a default and static password. This account is created at installation and cannot be changed or deleted without impacting the functionality of the system. An attacker could exploit this vulnerability by connecting to the affected system using this default account. The account can be used to authenticate remotely to the device via Telnet (or SSH on a specific release) and locally on the serial
Cisco
Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
vendor_cisco
CVE-2016-1329 Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
CVE-2016-1329: Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. The vulnerability is due to a user account that has a default and static password. This account is created at installation and cannot be changed or deleted without impacting the functionality of the system. An attacker could exploit this vulnerability by connecting to the affected system using this default account. The account can be used to authenticate remotely to the device via Telnet (or SSH on a specific release) and locally o
GHSA
GHSA-hcw6-7w4p-27j8: Cisco NX-OS 6
ghsa_unreviewed·2022-05-17
CVE-2016-1329 [CRITICAL] CWE-287 GHSA-hcw6-7w4p-27j8: Cisco NX-OS 6
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n3khttp://www.securitytracker.com/id/1035161https://isc.sans.edu/forums/diary/20795http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n3khttp://www.securitytracker.com/id/1035161https://isc.sans.edu/forums/diary/20795
2016-03-03
Published