Nx-os (Cisco) - vulnerabilities (CVEs)

278 CVEs, 0 in the last 30 days, 1396 known versions, newest CVE from 2024-08-28. Vendor: Cisco.

CVEs of Nx-os

CVE-2024-20413 - CVSS 6.7 (medium), 2024-08-28: A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to…
CVE-2024-20411 - CVSS 6.7 (medium), 2024-08-28: A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code…
CVE-2024-20446 - CVSS 8.6 (high), 2024-08-28: A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2024-20286 - CVSS 8.8 (high), 2024-08-28: A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox…
CVE-2024-20285 - CVSS 8.8 (high), 2024-08-28: A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox…
CVE-2024-20284 - CVSS 8.8 (high), 2024-08-28: A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox…
CVE-2024-20399 - CVSS 6.7 (medium), 2024-07-01: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands…
CVE-2024-20321 - CVSS 8.6 (high), 2024-02-29: A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause…
CVE-2024-20294 - CVSS 6.6 (medium), 2024-02-29: A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent…
CVE-2024-20291 - CVSS 5.8 (medium), 2024-02-29: A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS…
CVE-2024-20267 - CVSS 8.6 (high), 2024-02-29: A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to…
CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
CVE-2023-20115 - CVSS 5.4 (medium), 2023-08-23: A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an…
CVE-2023-20169 - CVSS 7.4 (high), 2023-08-23: A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco…
CVE-2023-20168 - CVSS 7.1 (high), 2023-08-23: A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected…
CVE-2023-20185 - CVSS 7.4 (high), 2023-07-12: A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated,…
CVE-2023-20050 - CVSS 7.8 (high), 2023-02-23: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…
CVE-2023-20089 - CVSS 7.4 (high), 2023-02-23: A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI)…
CVE-2022-20624 - CVSS 8.6 (high), 2022-02-23: A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a…
CVE-2022-20623 - CVSS 8.6 (high), 2022-02-23: A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could…
CVE-2022-20650 - CVSS 8.8 (high), 2022-02-23: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root…
CVE-2022-20625 - CVSS 4.3 (medium), 2022-02-23: A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to…
CVE-2021-34714 - CVSS 7.4 (high), 2021-09-23: A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software,…
CVE-2021-1587 - CVSS 8.6 (high), 2021-08-25: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated,…
CVE-2021-1591 - CVSS 5.8 (medium), 2021-08-25: A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass…
CVE-2021-1586 - CVSS 8.6 (high), 2021-08-25: A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI)…
CVE-2021-1590 - CVSS 5.3 (medium), 2021-08-25: A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause…
CVE-2021-1584 - CVSS 6.7 (medium), 2021-08-25: A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to…
CVE-2021-1588 - CVSS 8.6 (high), 2021-08-25: A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker…
CVE-2021-1583 - CVSS 4.4 (medium), 2021-08-25: A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI)…
CVE-2021-1523 - CVSS 8.6 (high), 2021-08-25: A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to…
CVE-2021-1367 - CVSS 4.3 (medium), 2021-02-24: A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a…
CVE-2021-1361 - CVSS 9.8 (critical), 2021-02-24: A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in…
CVE-2021-1387 - CVSS 8.6 (high), 2021-02-24: A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
CVE-2021-1231 - CVSS 4.7 (medium), 2021-02-24: A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow…
CVE-2021-1368 - CVSS 8.8 (high), 2021-02-24: A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent…
CVE-2021-1227 - CVSS 8.1 (high), 2021-02-24: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…
CVE-2021-1230 - CVSS 8.6 (high), 2021-02-24: A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could…
CVE-2021-1229 - CVSS 5.8 (medium), 2021-02-24: A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory…
CVE-2021-1228 - CVSS 7.4 (high), 2021-02-24: A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure…
CVE-2021-1389 - CVSS 6.5 (medium), 2021-02-04: A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices could allow an unauthenticated,…
CVE-2020-3504 - CVSS 3.3 (low), 2020-08-27: A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of…
CVE-2020-3397 - CVSS 8.6 (high), 2020-08-27: A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote…
CVE-2020-3454 - CVSS 7.2 (high), 2020-08-27: A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject arbitrary commands that could be…
CVE-2020-3394 - CVSS 7.8 (high), 2020-08-27: A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an…
CVE-2020-3415 - CVSS 8.8 (high), 2020-08-27: A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with…
CVE-2020-3517 - CVSS 8.6 (high), 2020-08-27: A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause…
CVE-2020-3398 - CVSS 8.6 (high), 2020-08-27: A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote…
CVE-2020-3338 - CVSS 7.5 (high), 2020-08-27: A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote…
CVE-2020-3228 - CVSS 8.6 (high), 2020-06-03: A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an…
CVE-2020-3217 - CVSS 8.8 (high), 2020-06-03: A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and…
CVE-2020-10136 - CVSS 5.3 (medium), 2020-06-02: IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing,…
CVE-2020-3170 - CVSS 5.3 (medium), 2020-02-26: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to…
CVE-2020-3175 - CVSS 8.6 (high), 2020-02-26: A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote…
CVE-2020-3174 - CVSS 4.7 (medium), 2020-02-26: A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid…
CVE-2020-3172 - CVSS 8.8 (high), 2020-02-26: A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to…
CVE-2020-3168 - CVSS 7.5 (high), 2020-02-26: A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to…
CVE-2020-3165 - CVSS 8.2 (high), 2020-02-26: A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX-OS Software could allow an…
CVE-2020-3120 - CVSS 7.4 (high), 2020-02-05: A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an…
CVE-2020-3119 - CVSS 8.8 (high), 2020-02-05: A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary…
CVE-2019-1734 - CVSS 5.5 (medium), 2019-11-05: A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker…
CVE-2019-12662 - CVSS 6.7 (medium), 2019-09-25: A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15…
CVE-2019-12717 - CVSS 7.8 (high), 2019-09-25: A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco NX-OS Software could allow an authenticated, local attacker to execute…
CVE-2019-1968 - CVSS 7.5 (high), 2019-08-30: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to…
CVE-2019-1967 - CVSS 8.6 (high), 2019-08-30: A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of…
CVE-2019-1977 - CVSS 7.5 (high), 2019-08-30: A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow…
CVE-2019-1966 - CVSS 7.8 (high), 2019-08-30: A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an…
CVE-2019-1969 - CVSS 5.8 (medium), 2019-08-30: A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow…
CVE-2019-1965 - CVSS 7.7 (high), 2019-08-28: A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to…
CVE-2019-1962 - CVSS 8.6 (high), 2019-08-28: A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which…
CVE-2019-1964 - CVSS 8.6 (high), 2019-08-28: A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the…
CVE-2019-1963 - CVSS 7.7 (high), 2019-08-28: A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an…
CVE-2019-1901 - CVSS 8.8 (high), 2019-07-31: A vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software…
CVE-2019-1780 - CVSS 6.7 (medium), 2019-05-16: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to…
CVE-2019-1858 - CVSS 8.6 (high), 2019-05-16: A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an…
CVE-2019-1768 - CVSS 6.7 (medium), 2019-05-16: A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator…
CVE-2019-1808 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1811 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1810 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an…
CVE-2019-1813 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1809 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1812 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1795 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1791 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands…
CVE-2019-1778 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux…
CVE-2019-1782 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1790 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary…
CVE-2019-1776 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux…
CVE-2019-1781 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1784 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux…
CVE-2019-1775 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…
CVE-2019-1779 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1783 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands…
CVE-2019-1774 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…
CVE-2019-1769 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands…
CVE-2019-1767 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator…
CVE-2019-1735 - CVSS 7.8 (high), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the…
CVE-2019-1727 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue…
CVE-2019-1730 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of…
CVE-2019-1733 - CVSS 5.4 (medium), 2019-05-15: A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site…