Buffer Overflow Vulnerability in NX-API of Cisco NX-OS Software

CVE-2018-0301

Summary

An improper input validation vulnerability in the NX-API feature of Cisco NX-OS Software can allow an unauthenticated, remote attacker to exploit the management interface of affected devices. By crafting a malicious HTTP or HTTPS packet directed at the NX-API, an attacker could trigger a buffer overflow, potentially leading to arbitrary code execution with root privileges. This vulnerability impacts various Cisco Nexus switch models and is disabled by default, enhancing security for unconfigured devices.

References