CVE-2014-2200

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-26 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629.

Affected products

Cisco NX-OS: 5.0(3)n1(1), 5.0(3)n1(1a), 5.0(3)n1(1b), 5.0(3)n1(1c), 5.0(3)n2(1), 5.0(3)n2(2) (+24)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos

Get alerted when CVE-2014-2200 or the next vulnerability affects your stack