Vulnerability in Cisco Nexus_1000v_for_microsoft_hyper-v
CVE-2015-0721
Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CL…
EPSS: 0.001 (34.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- 93410 (vdb-entry, x_refsource_BID)
- 20161005 Cisco NX-OS Software-Based Products Authentication, Authorization, and Accounting Bypass Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- 1036947 (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2015-0721?
- CVE-2015-0721 is a high-severity vulnerability in Cisco Nexus_1000v_for_microsoft_hyper-v, classified under CWE-264. CVSS score: 8.0/10. Published 2016-10-06.
- How severe is CVE-2015-0721?
- High severity. CVSS v3 base score is 8.0 out of 10.