Intrusion PreventionCisco.NX.OS.Section.And.Less.Privilege.Escalation
Description
This indicates an attack attempt to exploit a Privilege Escalation vulnerability in Cisco NX-OS.
The vulnerability is due to insufficient sanitizing of user supplied inputs. A remote attacker can gain access to the underlying systems that the application is running on top of and execution restricted commands.
Affected Products
Cisco Systems Cisco Unified Computing System prior to 1.4 (1i), 1.3 (1c)
Cisco Systems Nexus 4000
Cisco Systems Nexus 5000 prior to 4.0(1a)N2(1)
Cisco Systems Nexus 7000 prior to 4.1(4)
Cisco Systems NX-OS prior to 4.2
Cisco Systems NX-OS prior to 5.1
Impact
Privilege Escalation: Remote attackers can leverage their privilege on the vulnerable systems.
Recommended Actions
Refer to the vendor's website for suggested workaround.
http://tools.cisco.com/security/center/viewAlert.x?alertId=24458
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29925 |
| Created | Nov 08, 2011 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2011-2569 |
| Exploit Prediction Score | 0.04% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Cisco |