Posts tagged: Cisco

Missing authorisation checks on some Nexus Dashboard and NDFC REST API endpoints let a low-privileged, authenticated user read proxy and NTP settings and tamper with image files, with no workaround available.

An authenticated CLI user on Cisco NX-OS switches and fabric interconnects can inject crafted command arguments to read and write OS files, limited to whatever permissions their non-root account already has.

Cisco NX-OS logs can capture stored credentials in plain text, letting anyone with local file-system access on Nexus or UCS gear read them straight out of the logs.

An authenticated low-privileged attacker who can reach NX-API, NETCONF, RESTCONF, gRPC or telemetry on a Nexus 3000/9000 switch can crash the PIM6 process, disrupting multicast routing until it restarts.

A stored XSS flaw in Cisco IMC’s virtual keyboard/video monitor interface lets a low-privileged, already-authenticated user plant script that runs in another vKVM user’s session, and the same client ships inside a long list of UCS-based appliances.

Two command injection bugs in Cisco UCS Manager let an already-authenticated admin escalate to root or tamper with system files on the fabric interconnect’s underlying OS.

A stored XSS flaw in Cisco UCS Manager’s web interface lets an Administrator or AAA Administrator plant script that runs in another admin’s browser session on the fabric interconnect.

A path-traversal flaw in the web interface of Cisco EPNM and Prime Infrastructure lets an authenticated, low-privileged user pull arbitrary files off the underlying server filesystem.