CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2016-1329

CVSS 9.8v3.0pub. 2016-03-03upd. 2026-05-06

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Nexus 3048

    HW
    Cisco
    all versions

  • Cisco Nexus 3064

    HW
    Cisco
    all versions

  • Cisco Nexus 3064t

    HW
    Cisco
    all versions

  • Cisco Nexus 3064x

    HW
    Cisco
    all versions

  • Cisco Nexus 3524

    HW
    Cisco
    all versions

  • Cisco Nexus 3548

    HW
    Cisco
    all versions

  • Samsung X14j Firmware

    OS
    Samsung
    t-ms14jakucb-1102.5

  • Sun Opensolaris

    OS
    Sun
    snv_124

  • Zyxel Gs1900 10hp Firmware

    OS
    Zyxel
    < 2.50\(aazi.0\)c0

  • Zzinc Keymouse Firmware

    OS
    Zzinc
    3.08
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2019-15800CRITICAL9.8PL ✓same product

Zyxel GS1900 — command injection w bibliotece libclicmd.so (RCE)

CVE-2019-15803CRITICAL9.1PL ✓same product

Zyxel GS1900: Auth Bypass w ukrytej powłoce diagnostycznej

CVE-2018-0310CRITICAL9.8PL ✓same product

Cisco FXOS/NX-OS: buffer overread w Cisco Fabric Services umożliwia DoS lub wyciek danych

CVE-2018-0301CRITICAL9.8PL ✓same product

Cisco NX-OS NX-API — buffer overflow umożliwiający RCE jako root

CVE-2015-5729CRITICAL9.8PL ✓same product

Samsung Smart TV i drukarki: słabe klucze WPA2 PSK w trybie Soft AP