CVE-2016-1455
published 2016-10-05CVE-2016-1455: Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to…
PriorityP340high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
2.36%
82.0th percentile
Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | nexus_9000 | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-98hm-3g42-fqm2: Cisco NX-OS before 7
ghsa_unreviewed·2022-05-13
CVE-2016-1455 [HIGH] CWE-200 GHSA-98hm-3g42-fqm2: Cisco NX-OS before 7
Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365.
Cisco
Cisco Nexus 9000 Information Disclosure Vulnerability
vendor_cisco·2016-10-05·CVSS 5.0
CVE-2016-1455 [MEDIUM] CWE-200 Cisco Nexus 9000 Information Disclosure Vulnerability
Cisco Nexus 9000 Information Disclosure Vulnerability
A vulnerability in the internal iptables configuration for local interfaces on the Cisco Nexus 9000 Series Switch could allow an unauthenticated, remote attacker to access certain sensitive data. The attacker could use this information to conduct additional reconnaissance attacks.
The vulnerability is due to incorrect filtering of network traffic destined to certain TCP and UDP ports configured on a local interface. An attacker could exploit this vulnerability by connecting to the affected device on one of the exposed TCP or UDP ports. An exploit could allow the attacker to discover certain sensitive data which should be restricted and could be used to conduct further attacks.
Cisco has released software updates that address this vul
Cisco
Cisco Nexus 9000 Information Disclosure Vulnerability
vendor_cisco
CVE-2016-1455 Cisco Nexus 9000 Information Disclosure Vulnerability
CVE-2016-1455: Cisco Nexus 9000 Information Disclosure Vulnerability
A vulnerability in the internal iptables configuration for local interfaces on the Cisco Nexus 9000 Series Switch could allow an unauthenticated, remote attacker to access certain sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to incorrect filtering of network traffic destined to certain TCP and UDP ports configured on a local interface. An attacker could exploit this vulnerability by connecting to the affected device on one of the exposed TCP or UDP ports. An exploit could allow the attacker to discover certain sensitive data which should be restricted and could be used to conduct further attacks. Cisco has released software updates that addr
No detection rules found.
No public exploits indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-n9kinfohttp://www.securityfocus.com/bid/93415http://www.securitytracker.com/id/1036957http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-n9kinfohttp://www.securityfocus.com/bid/93415http://www.securitytracker.com/id/1036957
2016-10-05
Published