CVE-2015-4234: Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users t...

Security readout for executives and security teams

This CVE describes a Cisco Nexus NX-OS issue where someone who already has local access to the device could gain root-level control through the Python interpreter. It is not described as remotely exploitable in the provided sources, but root access on network infrastructure can materially increase operational and security risk. Exposure appears limited to Cisco Nexus devices running NX-OS 6.0(2) or 6.2(2) where users have local access. The provided affected-products metadata is incomplete, so teams should confirm device models and versions against Cisco guidance. Treat this as a high-priority infrastructure hardening item if affected Nexus devices remain in service. The issue requires local access, but successful exploitation could give root control of core networking equipment. If those versions are absent, residual priority is low. Mitigation focus: Inventory Nexus devices and identify NX-OS 6.0(2) or 6.2(2).; Review Cisco advisory 39571 for fixed software and supported workarounds.; Prioritize remediation for devices with broad local or administrative access..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.