Insecure Default Credentials in Cisco Nexus 3000 and 3500 Series Devices

CVE-2016-1329

Summary

Cisco Nexus 3000 and 3500 Series Devices contain hardcoded credentials in specified NX-OS versions that can be exploited by remote attackers to gain root privileges. Utilizing TELNET or SSH sessions, unauthorized users can compromise device security, potentially leading to unauthorized access and control over network equipment. The affected devices must be updated to ensure security against such vulnerabilities.

References