Vulnerabilities/CVE-2015-0582

CVE-2015-0582: cisco nx-os Improper Input Validation

SSVC · Estimated by CveMateAttendEscalate and remediate ahead of routine patching. CISA has no entry yet, so CveMate computed this from CVSS and exploit data. It is replaced when CISA publishes.

ExploitationNone (derived)

AutomatableYes (derived)

Technical impactPartial (derived)

Mission & well-beingHigh (assumed)

Source: CveMate estimate, same decision tree as CISA.CISA publishes the first three inputs. Mission & well-being depends on your environment, so it is assumed at its highest: the decision is a worst case.

Modified

Published 10-01-2015Last modified 06-08-2024

On this page

Summary Timeline Description CVSS metrics EPSS trend Known exploited Public exploits Weaknesses Affected systems References

Key information

Published10-01-2015

Modified06-08-2024

SourceNVD

CVSS5.0

EPSS3.00%

KEV0

Exploits0

Vulnerability summary

CVE-2015-0582 is a medium (CVSS 5.0) Improper Input Validation vulnerability in cisco nx-os. EPSS estimates a 3.00% chance of exploitation in the next 30 days, higher than 87.2% of scored vulnerabilities.

Overall risk

21/100

0100

Low · default modelHow is this calculated?

SSVC · Estimated by CveMateAttendEscalate and remediate ahead of routine patching. CISA has no entry yet, so CveMate computed this from CVSS and exploit data. It is replaced when CISA publishes.

ExploitationNone (derived)

AutomatableYes (derived)

Technical impactPartial (derived)

Mission & well-beingHigh (assumed)

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

3.00%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

10-01-2015
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

Medium 5.0Preferred score · NVD (NIST)

AV:N/AC:L/Au:N/C:N/I:N/A:P

SourcesSingle source

EPSS trend

Probability

3.00%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.00% on 22-09-2026

100%75%50%25%0%

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Cisco1 product

nx-osna

1 vendor · 1 product

References

4 links

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0582Vendor AdvisoryX Refsource CISCO
www.securityfocus.com/bid/71979VDB EntryX Refsource BIDThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/99995VDB EntryX Refsource XF
www.securitytracker.com/id/1031539VDB EntryX Refsource SECTRACKThird Party Advisory

Related vulnerabilities

All vulnerabilities innx-os