CVE-2014-2200 (GCVE-0-2014-2200)
Vulnerability from cvelistv5
Published
2014-05-24 01:00
Modified
2024-08-06 10:06
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T10:06:00.323Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "20140521 Multiple Vulnerabilities in Cisco NX-OS-Based Products", "tags": [ "vendor-advisory", "x_refsource_CISCO", "x_transferred" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2014-05-21T00:00:00", "descriptions": [ { "lang": "en", "value": "Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2014-05-24T01:57:00", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco" }, "references": [ { "name": "20140521 Multiple Vulnerabilities in Cisco NX-OS-Based Products", "tags": [ "vendor-advisory", "x_refsource_CISCO" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@cisco.com", "ID": "CVE-2014-2200", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "20140521 Multiple Vulnerabilities in Cisco NX-OS-Based Products", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos" } ] } } } }, "cveMetadata": { "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2014-2200", "datePublished": "2014-05-24T01:00:00", "dateReserved": "2014-02-25T00:00:00", "dateUpdated": "2024-08-06T10:06:00.323Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2014-2200\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2014-05-26T00:25:31.720\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629.\"},{\"lang\":\"es\",\"value\":\"Cisco NX-OS 5.0 anterior a 5.0(5) en dispositivos Nexus 7000, cuando autenticaci\u00f3n local y m\u00faltiples VDCs est\u00e1n habilitadas, permite a usuarios remotos autenticados ganar privilegios dentro de una VDC no intencionado a trav\u00e9s de una sesi\u00f3n SSH hacia una interfaz de gesti\u00f3n, tambi\u00e9n conocido como Bug ID CSCti11629.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:S/C:C/I:C/A:C\",\"baseScore\":7.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD5537B6-54D4-40F1-98F4-D6E6AE91F203\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DC4F29-94D4-4D71-9D40-CD1E6C6D5A91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1280802D-3B3B-401B-B6ED-2D940B9A94A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n1\\\\(1c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4B91092-DE54-4591-9C0F-A22A04AB71E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FE1F177-8952-4ECE-9E7D-5DB17895148A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D95D0F4E-944D-4AB8-B316-7842CB1F9C26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7856BA8B-4959-4FC2-AF4F-747FCFCC8EBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)n2\\\\(2b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A402251-E36D-4DD1-8DE9-6DA025CBECEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8C124BA-D5FC-422A-B3F4-AC1A41B7EEE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F358E8D0-624B-412A-8726-B8AF96156317\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17A4CE07-64FF-4C5C-81FF-A2388818CF7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFDC9595-39D4-4BF8-AF18-D27A500C9007\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u1\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7241BFDB-6386-4CBE-ACFB-4599EDE9CB53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AF7CE90-9433-4E1D-A2AD-0B8854521CCB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"171160E9-F6B8-4C8A-B086-431E3E2A27BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CAFAE6E-8B64-4A1F-A7E4-2D4BDFB7D5B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91C35886-CB9B-4477-9AB3-9F1C9E45E757\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F393BE8-8CC4-4302-829F-2C4F97BAC14B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u2\\\\(2d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE855B3E-B2B8-4EBA-8303-55F6A5A77E79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"641D651A-B85B-4E9E-BE92-35AFAE8A63A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(2\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7810F6FD-F58F-4121-9D30-8C5E3E163EFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09C38DCD-2A5F-4095-ABA4-02E95D93C358\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u3\\\\(2b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"103A4C19-0E91-45FC-9AA2-F40215FCF63B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u4\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F61C03B-D7AB-468A-B092-158730FB3E0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F883AA8-CC44-4440-AB30-D7AC29C242F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7390B4D2-2121-4311-A798-337E8B777A7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"924C6663-9EA0-4124-ACC6-0AFC649AEA6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C559C83-FB34-4B1A-A6B3-1834D6CD022C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F422D53-4FF4-43FB-8F62-D53393A8C038\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:nx-os:5.0\\\\(3\\\\)u5\\\\(1e\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CFFFE88-17EA-4515-BF71-C0AB82957B21\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B22B3865-30E9-4B5A-A37D-DC33F1150FFE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"459A7F11-52BF-4AD6-B495-4C4D6C050493\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B\"}]}]}],\"references\":[{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}" } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…