Cisco Patches Critical, High Severity Flaws in NX-OS
Cisco informed customers on Wednesday that it has released software updates for several of its products to address critical and high severity vulnerabilities.
The most serious of the issues is a critical vulnerability related to the existence of insecure default credentials in the NX-OS network operating system running on Cisco Nexus 3000 series and Nexus 3500 platform switches. The flaw, identified as CVE-2016-1329, can be exploited by a remote, unauthenticated attacker to log into a vulnerable device with root privileges via an account that has a default and static password.
The problem is that the account in question, which is created during installation, cannot be changed or removed without affecting the system’s functionality.
