Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.3

Cisco NX‑OS on Nexus 9000 can be forced to restart

CVE-2015-0686 · published 11 years ago
Summary

Cisco’s NX‑OS software version 6.1(2)I2(3) running on Nexus 9000 switches can be made to reboot if a High Availability reset policy is in place and an attacker who already has a valid login accesses the device through SNMP. This results in a temporary loss of network services. Apply the latest software update from Cisco or remove the HA reset policy until the fix is installed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco nx-os 6.1\(2\)i2\(3\)
cpe:2.3:o:cisco:nx-os:6.1\(2\)i2\(3\):*:*:*:*:*:*:*
Original advisory text
The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a denial of service (d...
The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a denial of service (device reload) via unspecified vectors, aka Bug ID CSCuq92240.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.3 Medium
Exploitation
1% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published3 Apr 2015
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-0686 · NVD
Track software like this
Free during beta