CVE-2015-0658: The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly re...

Security readout for executives and security teams

This flaw affects Cisco NX-OS PowerOn Auto Provisioning behavior. A malicious system on the same local network could abuse DHCP responses during initialization to run commands as root on the device. That makes it most concerning in provisioning networks, staging environments, or poorly controlled Layer 2 segments. Exposure appears limited to Cisco NX-OS devices using or entering POAP initialization where untrusted local-network DHCP responses can reach the device. Exact affected releases are not provided in the source bundle. Prioritize validation for network infrastructure that can enter POAP on shared or weakly controlled local networks. The business risk is device compromise at root level, but evidence for internet-wide or active exploitation is not provided. Mitigation focus: Check Cisco advisory 38062 for affected releases and official remediation.; Apply Cisco-recommended NX-OS updates or mitigations if the device release is affected.; Restrict POAP/provisioning networks to trusted DHCP and management infrastructure..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.