rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-1595 Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface index. An adjacent attacker with the ability to submit a crafted FCoE packet that crosses affected interfaces could trigger this vulnerability. A successful exploit could allow the attacker to cause a packet loop and high throughput on the affected interfaces, resulting in a DoS condition. This vulnerability has been fixed in version 7.3(5)N1(1).
Problem types: cwe_id: CWE-913
description: CWE-913
Affected products: vendor: Cisco
product: Cisco NX-OS Software
Published: 2019-03-06T22:00:00.000Z
CVE-2019-1596 Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability
A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. The attacker must authenticate with valid user credentials. The vulnerability is due to incorrect permissions of a system executable. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Bash prompt. A successful exploit could allow the attacker to escalate their privilege level to root. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Problem types: cwe_id: CWE-264
description: CWE-264
Affected products: vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 9000 Series Switches in Standalone NX-OS Mode
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
Published: 2019-03-07T19:00:00.000Z
CVE-2019-1597 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of LDAP packets by an affected device. An attacker could exploit these vulnerabilities by sending an LDAP packet crafted using Basic Encoding Rules (BER) to an affected device. The LDAP packet must have a source IP address of an LDAP server configured on the targeted device. A successful exploit could cause the affected device to reload, resulting in a DoS condition. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. Firepower 9300 Security Appliances are affected in versions prior to 2.0.1.201, 2.2.2.54 and 2.3.1.75. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.2(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(2). Nexus 7000 and 7700 Series Switches are affected in versions prior to 8.2(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(1). Cisco UCS 6200 and 6300 Fabric Interconnect devices are affected in versions prior to 3.2(2b).
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Cisco
product: Firepower 4100 Series Next-Generation Firewalls
vendor: Cisco
product: Firepower 9300 Security Appliance
vendor: Cisco
product: MDS 9000 Series Multilayer Switches
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
vendor: Cisco
product: Nexus 9000 Series Switches in Standalone NX-OS Mode
vendor: Cisco
product: Cisco UCS 6200 and 6300 Fabric Interconnect
Published: 2019-03-07T19:00:00.000Z
CVE-2019-1598 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of LDAP packets by an affected device. An attacker could exploit these vulnerabilities by sending an LDAP packet crafted using Basic Encoding Rules (BER) to an affected device. The LDAP packet must have a source IP address of an LDAP server configured on the targeted device. A successful exploit could cause the affected device to reload, resulting in a DoS condition. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. Firepower 9300 Security Appliances are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.2(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(2). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(20), 7.3(2)D1(1), and 8.2(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(1). UCS 6200 and 6300 Fabric Interconnect are affected in versions prior to 3.2(2b).
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Cisco
product: Firepower 4100 Series Next-Generation Firewalls
vendor: Cisco
product: Firepower 9300 Security Appliance
vendor: Cisco
product: MDS 9000 Series Multilayer Switches
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
vendor: Cisco
product: Nexus 9000 Series Switches in Standalone NX-OS Mode
vendor: Cisco
product: UCS 6200 and 6300 Fabric Interconnect
Published: 2019-03-07T20:00:00.000Z
CVE-2019-1599 Cisco NX-OS Software Netstack Denial of Service Vulnerability
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to an issue with allocating and freeing memory buffers in the network stack. An attacker could exploit this vulnerability by sending crafted TCP streams to an affected device in a sustained way. A successful exploit could cause the network stack of an affected device to run out of available buffers, impairing operations of control plane and management plane protocols, resulting in a DoS condition. Note: This vulnerability can be triggered only by traffic that is destined to an affected device and cannot be exploited using traffic that transits an affected device. Nexus 1000V Switch for Microsoft Hyper-V is affected in versions prior to 5.2(1)SM3(2.1). Nexus 1000V Switch for VMware vSphere is affected in versions prior to 5.2(1)SV3(4.1a). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(6) and 9.2(2). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(11), 7.0(3)I7(6), and 9.2(2). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5) and 9.2(2). Nexus 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(5)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22. Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5) and 9.2(2). UCS 6200 and 6300 Series Fabric Interconnect are affected in versions prior to 3.2(3j) and 4.0(2a). UCS 6400 Series Fabric Interconnect are affected in versions prior to 4.0(2a).
Problem types: cwe_id: CWE-399
description: CWE-399
Affected products: vendor: Cisco
product: Nexus 1000V Switch for Microsoft Hyper-V
vendor: Cisco
product: Nexus 1000V Switch for VMware vSphere
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 5500, 5600, and 6000 Series Switches
vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
vendor: Cisco
product: Nexus 9000 Series Switches in Standalone NX-OS Mode
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
vendor: Cisco
product: UCS 6200 and 6300 Series Fabric Interconnect
vendor: Cisco
product: UCS 6400 Series Fabric Interconnect
Published: 2019-03-07T20:00:00.000Z
CVE-2019-1600 Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability
A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive information that is stored in the file system of an affected system. The vulnerability is due to improper implementation of file system permissions. An attacker could exploit this vulnerability by accessing and modifying restricted files. A successful exploit could allow the attacker to access sensitive and critical files. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.2.2.91 and 2.3.1.110. Firepower 9300 Series Next-Generation Firewalls are affected in versions prior to 2.2.2.91 and 2.3.1.110. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(25), 8.1(1b), and 8.3(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(3)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Problem types: cwe_id: CWE-264
description: CWE-264
Affected products: vendor: Cisco
product: Firepower 4100 Series Next-Generation Firewalls
vendor: Cisco
product: Firepower 9300 Series Next-Generation Firewalls
vendor: Cisco
product: MDS 9000 Series Multilayer Switches
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 2000, 5500, 5600, and 6000 Series Switches
vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
vendor: Cisco
product: Nexus 9000 Series Switches-Standalone
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
Published: 2019-03-07T20:00:00.000Z
CVE-2019-1601 Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to impose strict filesystem permissions on the targeted device. An attacker could exploit this vulnerability by accessing and modifying restricted files. A successful exploit could allow an attacker to use the content of this configuration file to bypass authentication and log in as any user of the device. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(25), 8.1(1b), and 8.3(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(3)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Cisco
product: MDS 9000 Series Multilayer Switches
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 2000, 5500, 5600, and 6000 Series Switches
vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
vendor: Cisco
product: Nexus 9000 Series Switches-Standalone
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
Published: 2019-03-08T18:00:00.000Z
CVE-2019-1602 Cisco NX-OS Software Privilege Escalation Vulnerability
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker could exploit this vulnerability by logging in to the CLI of an affected device, accessing a specific file, and leveraging this information to authenticate to the NX-API server. A successful exploit could allow an attacker to make configuration changes as administrator. Note: NX-API is disabled by default. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Problem types: cwe_id: CWE-264
description: CWE-264
Affected products: vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 9000 Series Switches-Standalone
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
Published: 2019-03-08T19:00:00.000Z
CVE-2019-1603 Cisco NX-OS Software Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow an attacker to make configuration changes to the system as administrator. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 9000 Series Switches-Standalone
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
Published: 2019-03-08T19:00:00.000Z
CVE-2019-1604 Cisco NX-OS Software Privilege Escalation Vulnerability
A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to an incorrect authorization check of user accounts and their associated Group ID (GID). An attacker could exploit this vulnerability by taking advantage of a logic error that will permit the use of higher privileged commands than what is necessarily assigned. A successful exploit could allow an attacker to execute commands with elevated privileges on the underlying Linux shell of an affected device. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 8.2(3), and 8.3(2). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 9000 Series Switches-Standalone
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
Published: 2019-03-08T19:00:00.000Z
CVE-2019-1605 Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTTPS request to an internal service on an affected device that has the NX-API feature enabled. A successful exploit could allow the attacker to cause a buffer overflow and execute arbitrary code as root. Note: The NX-API feature is disabled by default. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.1(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(8). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(2)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 7.3(3)D1(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Cisco
product: MDS 9000 Series Multilayer Switches
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
vendor: Cisco
product: Nexus 3600 Platform Switches
vendor: Cisco
product: Nexus 2000, 5500, 5600, and 6000 Series Switches
vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
vendor: Cisco
product: Nexus 9000 Series Switches in Standalone NX-OS Mode
vendor: Cisco
product: Nexus 9500 R-Series Line Cards and Fabric Modules
Published: 2019-03-08T20:00:00.000Z
CVE-2019-1606 Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid user credentials to exploit this vulnerability. Nexus 3000, 3500, and Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4).
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: Cisco
product: Nexus 9000 Series Switches in Standalone NX-OS Mode
vendor: Cisco
product: Nexus 3000 Series Switches
vendor: Cisco
product: Nexus 3500 Platform Switches
Published: 2019-03-08T20:00:00.000Z
CVE-2019-1607 Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1607)
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
Published: 2019-03-08T20:00:00.000Z
CVE-2019-1608 Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1608)
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: Cisco
product: MDS 9000 Series Multilayer Switches
vendor: Cisco
product: Nexus 7000 and 7700 Series Switches
Published: 2019-03-08T20:00:00.000Z