PT-2016-1474 · Cisco · Cisco Nx-Os+1

Published 2016-03-02 · Updated 2016-12-03 · CVE-2016-1329

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.0(2)U6(1) through 6.0(2)U6(5) Cisco NX-OS versions 6.0(2)A6(1) through 6.0(2)A6(5) Cisco NX-OS version 6.0(2)A7(1)

Description The issue is due to hardcoded credentials in the Cisco NX-OS software, allowing remote attackers to obtain root privileges via TELNET or SSH sessions. This could enable an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. The vulnerability exists because of a user account with a default and static password, created at installation, which cannot be changed or deleted without impacting system functionality.

Recommendations For Cisco NX-OS versions 6.0(2)U6(1) through 6.0(2)U6(5), update to a version that addresses this vulnerability. For Cisco NX-OS versions 6.0(2)A6(1) through 6.0(2)A6(5), update to a version that addresses this vulnerability. For Cisco NX-OS version 6.0(2)A7(1), update to a version that addresses this vulnerability. As a temporary workaround, consider restricting access to TELNET and SSH sessions until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2016-00775

CVE-2016-1329

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-1329 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1329 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00775 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n3k · Vendor Advisory
• https://isc.sans.edu/forums/diary/20795 · Note
• http://securitytracker.com/id/1035161 · Note