CVE-2015-0658

Severity: high (CVSS 7.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-03-28 · updated 2026-06-17
Weakness: CWE-20

Description

The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.

Affected products

Cisco NX-OS: 6.1(2), 6.1(3), 6.1(4), 6.1(4a), 6.2(2), 6.2(2a) (+62)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=38062
http://www.securitytracker.com/id/1031992
http://tools.cisco.com/security/center/viewAlert.x?alertId=38062
http://www.securitytracker.com/id/1031992

Get alerted when CVE-2015-0658 or the next vulnerability affects your stack