Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:nx-os:10.3\(3p\):*:*:*:*:*:*:*

part: o version: 10.3(3p) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductNx Os (7fdaeeff-6136-5b2e-aaf1-b2adfbc4551f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-20413 vulnerable 2026-06-08 06:27:26.109716 Cisco NX-OS Bash Privilege Escalation Vulnerability
MEDIUM (6.7)
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing application arguments from the Bash shell. An attacker with privileges to access the Bash shell could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to create new users with the privileges of network-admin.
Published: 2024-08-28T16:27:29.365Z
Updated: 2024-08-30T03:56:03.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20411 vulnerable 2026-06-08 06:27:26.076655 Cisco NX-OS Bash Arbitrary Code Execution Vulnerability
MEDIUM (6.7)
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code as root on an affected device. This vulnerability is due to insufficient security restrictions when executing commands from the Bash shell. An attacker with privileges to access the Bash shell could exploit this vulnerability by executing a specific crafted command on the underlying operating system. A successful exploit could allow the attacker to execute arbitrary code with the privileges of root.
Published: 2024-08-28T16:27:38.420Z
Updated: 2024-08-30T03:56:02.446Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.