CVE-2015-4213 Information disclosure in n/a

Medium 4.0 Published Updated

Authenticated remote attackers can discover cleartext passwords on Cisco Nexus 9000 devices due to a decryption mechanism flaw.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2015-4213?

CVE-2015-4213 is a medium-severity vulnerability in Cisco Nx-Os, published on 24 Jun 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391.

Weakness: CWE-200

Which versions are affected by CVE-2015-4213?

It affects 1 product.

Products include Cisco Nx-Os.

How do I fix CVE-2015-4213?

No fix has been published for CVE-2015-4213 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-4213 being exploited?

There is no known exploitation of CVE-2015-4213 in the wild and no public exploit code.

All Cisco Nx-Os vulnerabilities

Sources

Also known as GHSA-xj7r-q24h-7jww.

Is CVE-2015-4213 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free