Vulnerabilities/CVE-2016-1341

CVE-2016-1341: cisco nx-os Credentials Management Errors

SSVC · Estimated by CveMateAttendEscalate and remediate ahead of routine patching. CISA has no entry yet, so CveMate computed this from CVSS and exploit data. It is replaced when CISA publishes.

ExploitationNone (derived)

AutomatableYes (derived)

Technical impactTotal (derived)

Mission & well-beingHigh (assumed)

Source: CveMate estimate, same decision tree as CISA.CISA publishes the first three inputs. Mission & well-being depends on your environment, so it is assumed at its highest: the decision is a worst case.

Modified

Published 24-02-2016Last modified 05-08-2024

On this page

Summary Timeline Description CVSS metrics EPSS trend Known exploited Public exploits Weaknesses Affected systems References

Key information

Published24-02-2016

Modified05-08-2024

SourceNVD

CVSS9.8

EPSS1.08%

KEV0

Exploits0

Vulnerability summary

CVE-2016-1341 is a critical (CVSS 9.8) Credentials Management Errors vulnerability in cisco nx-os. EPSS estimates a 1.08% chance of exploitation in the next 30 days, higher than 64.8% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

SSVC · Estimated by CveMateAttendEscalate and remediate ahead of routine patching. CISA has no entry yet, so CveMate computed this from CVSS and exploit data. It is replaced when CISA publishes.

ExploitationNone (derived)

AutomatableYes (derived)

Technical impactTotal (derived)

Mission & well-beingHigh (assumed)

CVSS score

9.8/10

010

Critical · v3.0 (NVD)

EPSS score

1.08%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

24-02-2016
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

Cisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079.

CVSS metrics

2 scores · 1 source · 2 versions

v3.09.8v2.06.9

Critical 9.8Preferred score · NVD (NIST)

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SourcesSingle source

Medium 6.9Preferred score · NVD (NIST)

AV:L/AC:M/Au:N/C:C/I:C/A:C

SourcesSingle source

EPSS trend

Probability

1.08%

Chance of exploitation in the next 30 days

Percentile

65%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.08% on 22-09-2026

100%75%50%25%0%

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-255Credentials Management ErrorsWeaknesses in this category are related to the management of credentials.
CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Cisco1 product

nx-os7.0\(1\)n1\(1\) | 7.0\(1\)n1\(3\) | 7.0\(4\)n1\(1\)

1 vendor · 1 product

References

2 links

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160223-nx2000Vendor AdvisoryX Refsource CISCO
www.securitytracker.com/id/1035088VDB EntryX Refsource SECTRACK

Related vulnerabilities

All vulnerabilities innx-os