Description
The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.
Published: 2015-03-28
Score: 7.9 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2015-0671 The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.
History

No history.

Subscriptions

Cisco Nexus 3016 Nexus 3048 Nexus 3064 Nexus 3132q Nexus 3164q Nexus 3172 Nexus 3524 Nexus 3548 Nexus 5010 Nexus 5020 Nexus 5548p Nexus 5548up Nexus 5596t Nexus 5596up Nexus 56128p Nexus 5624q Nexus 5648q Nexus 5672up Nexus 5696q Nexus 6001 Nexus 6004 Nexus 7000 Nexus 7700 Nexus 93120tx Nexus 93128tx Nexus 9332pq Nexus 9336pq Aci Spine Nexus 9372px Nexus 9372tx Nexus 9396px Nexus 9396tx Nexus 9504 Nexus 9508 Nexus 9516 Nx-os
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-08-06T04:17:32.564Z

Reserved: 2015-01-07T00:00:00.000Z

Link: CVE-2015-0658

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2015-03-28T01:59:49.210

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-0658

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses