CVE-2015-0721

Severity: high (CVSS 8.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-06 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.

Affected products

Cisco NX-OS: 4.1.(2), 4.1.(3), 4.1.(4), 4.1.(5), 4.2(3), 4.2(4) (+172)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-nxaaa
http://www.securityfocus.com/bid/93410
http://www.securitytracker.com/id/1036947
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-nxaaa
http://www.securityfocus.com/bid/93410
http://www.securitytracker.com/id/1036947

Get alerted when CVE-2015-0721 or the next vulnerability affects your stack