Cisco Nexus, Cisco Unified Computing System (UCS), and Cisco 1000 Series Connected Grid Routers (CGR) are all based on the Cisco NX-OS operating system. These products are affected by one or more of the following vulnerabilities: Cisco NX-OS Virtual Device Context SSH Privilege Escalation Vulnerability Cisco NX-OS Virtual Device Context SSH Key Privilege Escalation Vulnerability Cisco NX-OS-Based Products Smart Call Home Buffer Overflow Vulnerability Cisco NX-OS Message Transfer Service Denial of Service Vulnerability No officially released images are affected Cisco has released software updates that address these vulnerabilities. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos
UCS 6100 | UCS 6200 | Nexus 9000 | Nexus 7000 | Nexus 6000 | Nexus 5000 | Nexus 4000 | Nexus 3000 | Nexus 1000v | MDS 9000 | CGR 1000 | |
---|---|---|---|---|---|---|---|---|---|---|---|
Cisco NX-OS Virtual Device Context SSH Privilege Escalation Vulnerability CVE-2014-2200 |
X | ||||||||||
Cisco NX-OS Virtual Device Context SSH Key Privilege Escalation Vulnerability CVE-2013-1191 |
X | ||||||||||
Cisco NX-OS-Based Products Smart Call Home Buffer Overflow Vulnerability CVE-2014-3261 |
X | X | X | X | X | X | X | ||||
Cisco NX-OS Message Transfer Service Denial of Service Vulnerability CVE-2014-2201 No Officially Released Versions are Affected |
|||||||||||
Recommended Release | 2.2(1d) | 2.2(1d) | N/A | 6.2(8) | N/A |
5.2(1)N1(7) |
4.1(2)E1(11) | 5.0(3)U5(1) 6.0(2)U2(4) |
N/A | N/A | CG4(3) 15.4(1)CG |
Note: The recommended software releases above resolve all issues impacting each platform in the preceding table.UCS 6100 = Cisco Unified Computing Server Fabric Interconnect 6100 Series devices
UCS 6200 = Cisco Unified Computing Server Fabric Interconnect 6200 Series devices
Nexus 9000 = Cisco Nexus 9000 Series devices
Nexus 7000 = Cisco Nexus 7000 Series devices
Nexus 6000 = Cisco Nexus 6000 Series devices
Nexus 5000 = Cisco Nexus 5000 Series and Cisco Nexus 5500 Series devices
Nexus 4000 = Cisco Nexus 4000 Series blade devices
Nexus 3000 = Cisco Nexus 3000 and Cisco Nexus 3500 Series devices
Nexus 1000V = Cisco Nexus 1000V Series Switches and 1010 Virtual Services Appliances
MDS 9000 = Cisco MDS 9000 Multilayer Switch/Director Family devices
CGR 1000 = Cisco 1000 Series Connected Grid Router devices
Affected Version |
First Fixed Release |
Recommended Release |
1.0 | N/A | 2.2(1d) |
1.1 | N/A | 2.2(1d) |
1.2 | N/A | 2.2(1d) |
1.3 | N/A | 2.2(1d) |
1.4(1h) and prior | 1.4(1i) | 2.2(1d) |
Affected Version | First Fixed Release> | Recommended Release |
4.X | N/A | 6.2(8) |
5.0(2a) and prior | 5.0(5) | 6.2(8) |
Affected Version | First Fixed Release | Recommended Release |
4.X | N/A | 6.2(8) |
5.X | N/A | 6.2(8) |
6.0 | N/A | 6.2(8) |
6.1(4a) and prior | 6.1(5) | 6.2(8) |
Affected Version | First Fixed Release | Recommended Release |
4.X | N/A | 6.2(8) |
5.0 | N/A | 6.2(8) |
5.1 | N/A | 6.2(8) |
5.2(3) and prior | 5.2(3a) | 6.2(8) |
Affected Version | First Fixed Release | Recommended Release |
4.X | N/A | 5.2(1)N1(7) 6.0(2)N2(4) 7.0(2)N1(1) |
5.0 | 5.1(3)N1(1) | 5.2(1)N1(7) 6.0(2)N2(4) 7.0(2)N1(1) |
Affected Version | First Fixed Release | Recommended Release |
4.1(2)E1(1k) and prior | 4.1(2)E1(1l) | 4.1(2)E1(1l) |
Affected Version | First Fixed Release | Recommended Release |
5.0(3)U2(1) and prior | 5.0(3)U2(2) | 5.0(3)U5(1j) 6.0(2)U2(4) |
Affected Version | First Fixed Release | Recommended Release |
CG3 | N/A | CG4(3) 15.4(1)CG |
CG4(1) | CG4(2) | CG4(3) 15.4(1)CG |
To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Revision 2.3 | 2014-June-02 | Updated Recommended Version in Nexus 7000 Software tables for the Cisco NX-OS Virtual Device Context SSH Privilege Escalation Vulnerability to match other tables. |
Revision 2.2 | 2014-May-29 | Removed Nexus 5500UP devices from the Confirmed Not Vulnerable section. While these devices shipped with a non-vulnerable version of NX-OS, they are capable of running an affected version of 5.0(3). |
Revision 2.1 | 2014-May-28 | Added a clarifying statement to the Smart Call Home vulnerability to stipulate that SCH must be configured to utilize SMTP as the reporting method. |
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A stand-alone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy, and may lack important information or contain factual errors. The information in this document is intended for end-users of Cisco products.