Cisco Security Advisory: Multiple Vulnerabilities in Cisco NX-OS-Based Products

Multiple Vulnerabilities in Cisco NX-OS-Based Products

Advisory ID: cisco-sa-20140521-nxos

Revision 1.0

For Public Release 2014 May 21 16:00  UTC (GMT)

Summary
=======

Cisco Nexus, Cisco Unified Computing System (UCS), Cisco MDS 9000 Series Multilayer Switches, and Cisco 1000 Series Connected Grid Routers (CGR) are all based on the Cisco NX-OS operating system. These products are affected by one or more of the following vulnerabilities:

  * Cisco NX-OS Virtual Device Context SSH Privilege Escalation Vulnerability
  * Cisco NX-OS Virtual Device Context SSH Key Privilege Escalation Vulnerability
  * Cisco NX-OS-Based Products Smart Call Home Buffer Overflow Vulnerability
  * Cisco NX-OS Message Transfer Service Denial of Service Vulnerability

Cisco has released free software updates that address these vulnerabilities.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos