Vulnerability Description
The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS 9000 devices, 6.2(12) on Nexus 7000 devices, 7.0(3) on Nexus 9000 devices, and 7.2(0)ZN(99.67) on Nexus 3000 devices allows remote attackers to cause a denial of service (login process reset) via an unspecified terminal-session request during TELNET session setup, aka Bug IDs CSCuo10554, CSCuu75466, CSCuu75471, CSCuu75484, CSCuu75498, CSCuu77170, and CSCuu77182.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Nx-Os | 4.1\(2\)e1\(1f\) |
| Cisco | Nexus 4001I | - |
| Cisco | Nexus 3016 | - |
| Cisco | Nexus 3048 | - |
| Cisco | Nexus 3064 | - |
| Cisco | Nexus 31128Pq | All versions |
| Cisco | Nexus 3132Q | - |
| Cisco | Nexus 3164Q | - |
| Cisco | Nexus 3172 | - |
| Cisco | Nexus 3232C | - |
| Cisco | Nexus 3264Q | - |
| Cisco | Nexus 3524 | - |
| Cisco | Nexus 3548 | - |
| Cisco | Nexus 7000 | - |
| Cisco | Nexus 7700 | - |
| Cisco | Nexus 93120Tx | - |
| Cisco | Nexus 93128Tx | - |
| Cisco | Nexus 9332Pq | - |
| Cisco | Nexus 9336Pq Aci Spine | - |
| Cisco | Nexus 9372Px | - |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39280Vendor Advisory
- http://www.securitytracker.com/id/1032561Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1032562Third Party AdvisoryVDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39280Vendor Advisory
- http://www.securitytracker.com/id/1032561Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1032562Third Party AdvisoryVDB Entry
FAQ
What is CVE-2015-0775?
CVE-2015-0775 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS 9000 devices, 6.2(12) o...
How severe is CVE-2015-0775?
CVE-2015-0775 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0775?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Nx-Os, Cisco Nexus 4001I, Cisco Nexus 3016, Cisco Nexus 3048, Cisco Nexus 3064.