CVE-2014-2200 (GCVE-0-2014-2200)
Vulnerability from cvelistv5
Published
2014-05-24 01:00
Modified
2024-08-06 10:06
Severity ?
CWE
  • n/a
Summary
Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629.
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:06:00.323Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20140521 Multiple Vulnerabilities in Cisco NX-OS-Based Products",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-05-24T01:57:00",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20140521 Multiple Vulnerabilities in Cisco NX-OS-Based Products",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2014-2200",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20140521 Multiple Vulnerabilities in Cisco NX-OS-Based Products",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2014-2200",
    "datePublished": "2014-05-24T01:00:00",
    "dateReserved": "2014-02-25T00:00:00",
    "dateUpdated": "2024-08-06T10:06:00.323Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2014-2200\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2014-05-26T00:25:31.720\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629.\"},{\"lang\":\"es\",\"value\":\"Cisco NX-OS 5.0 anterior a 5.0(5) en dispositivos Nexus 7000, cuando autenticaci\u00f3n local y m\u00faltiples VDCs est\u00e1n habilitadas, permite a usuarios remotos autenticados ganar privilegios dentro de una VDC no intencionado a trav\u00e9s de una sesi\u00f3n SSH hacia una interfaz de gesti\u00f3n, tambi\u00e9n conocido como Bug ID CSCti11629.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:S/C:C/I:C/A:C\",\"baseScore\":7.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD5537B6-54D4-40F1-98F4-D6E6AE91F203\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DC4F29-94D4-4D71-9D40-CD1E6C6D5A91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1280802D-3B3B-401B-B6ED-2D940B9A94A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4B91092-DE54-4591-9C0F-A22A04AB71E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FE1F177-8952-4ECE-9E7D-5DB17895148A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D95D0F4E-944D-4AB8-B316-7842CB1F9C26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7856BA8B-4959-4FC2-AF4F-747FCFCC8EBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(2b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A402251-E36D-4DD1-8DE9-6DA025CBECEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8C124BA-D5FC-422A-B3F4-AC1A41B7EEE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F358E8D0-624B-412A-8726-B8AF96156317\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17A4CE07-64FF-4C5C-81FF-A2388818CF7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFDC9595-39D4-4BF8-AF18-D27A500C9007\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7241BFDB-6386-4CBE-ACFB-4599EDE9CB53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AF7CE90-9433-4E1D-A2AD-0B8854521CCB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"171160E9-F6B8-4C8A-B086-431E3E2A27BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CAFAE6E-8B64-4A1F-A7E4-2D4BDFB7D5B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91C35886-CB9B-4477-9AB3-9F1C9E45E757\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F393BE8-8CC4-4302-829F-2C4F97BAC14B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE855B3E-B2B8-4EBA-8303-55F6A5A77E79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"641D651A-B85B-4E9E-BE92-35AFAE8A63A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7810F6FD-F58F-4121-9D30-8C5E3E163EFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09C38DCD-2A5F-4095-ABA4-02E95D93C358\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(2b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"103A4C19-0E91-45FC-9AA2-F40215FCF63B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u4\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F61C03B-D7AB-468A-B092-158730FB3E0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F883AA8-CC44-4440-AB30-D7AC29C242F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7390B4D2-2121-4311-A798-337E8B777A7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"924C6663-9EA0-4124-ACC6-0AFC649AEA6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C559C83-FB34-4B1A-A6B3-1834D6CD022C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F422D53-4FF4-43FB-8F62-D53393A8C038\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1e\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CFFFE88-17EA-4515-BF71-C0AB82957B21\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B22B3865-30E9-4B5A-A37D-DC33F1150FFE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"459A7F11-52BF-4AD6-B495-4C4D6C050493\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B\"}]}]}],\"references\":[{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…