CVE-2016-1341 Hardcoded credentials in n/a
Local attackers can gain root privileges on Cisco Nexus Fabric Extenders due to a blank root password, requiring immediate patching.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-1341?
CVE-2016-1341 is a critical vulnerability in Cisco Nx-Os, published on 24 Feb 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079.
Which versions are affected by CVE-2016-1341?
It affects 1 product.
Products include Cisco Nx-Os.
How do I fix CVE-2016-1341?
No fix has been published for CVE-2016-1341 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-1341 being exploited?
There is no known exploitation of CVE-2016-1341 in the wild and no public exploit code.
Other vulnerabilities in Cisco Nx-Os
- CVE-2024-20399 Cisco NX-OS Command Injection
- CVE-2021-1361 Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability
- CVE-2018-0301 Memory corruption in Cisco NX-OS unknown
- CVE-2016-1453 Memory corruption in n/a
- CVE-2022-20650 Cisco NX-OS Software NX-API Command Injection Vulnerability
Sources
Also known as GHSA-g2p3-wp5v-j757.