Nx-os vulnerabilities

13 known vulnerabilities in Nx-os from Cisco. 12 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Cisco NX-OS Software: NULL Pointer Dereference

  CVE-2024-20446Aug 28, 2024Cisco

  A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in a DHCPv6

• 8.8 High severity

  Cisco NX-OS Software: Protection Mechanism Failure

  CVE-2024-20286Aug 28, 2024Cisco

  A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due

• 8.8 High severity

  Cisco NX-OS Software: Improper Isolation or Compartmentalization

  CVE-2024-20285Aug 28, 2024Cisco

  A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due

• 8.8 High severity

  Cisco NX-OS Software: Protection Mechanism Failure

  CVE-2024-20284Aug 28, 2024Cisco

  A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due

• 6.7 Medium severity

  Cisco NX-OS Command Injection Exploited

  CVE-2024-20399Jul 1, 2024CiscoEPSS 4.31%

  A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insuffi

• 8.6 High severity

  Cisco NX-OS Software: Allocation of Resources Without Limits or Throttling

  CVE-2024-20321Feb 29, 2024Cisco

  A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP tra

• 8.6 High severity

  Cisco NX-OS Software: Buffer Copy without Checking Size of Input

  CVE-2024-20267Feb 29, 2024Cisco

  A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This

• 7.4 High severity

  A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco…

  CVE-2023-20169Aug 23, 2023Cisco

  A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker

• 7.4 High severity

  Cisco NX-OS System Software in ACI Mode: Inadequate Encryption Strength

  CVE-2023-20185Jul 12, 2023Cisco

  A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue

• 7.8 High severity

  Cisco NX-OS Software: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-20050Feb 23, 2023Cisco

  A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are p

• 8.8 High severity

  Cisco NX-OS Software: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20650Feb 23, 2022CiscoEPSS 14.5%

  A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the

• 7.5 High severity

  A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software…

  CVE-2022-20624Feb 23, 2022CiscoEPSS 12.1%

  A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validati

• 7.5 High severity

  A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of…

  CVE-2022-20623Feb 23, 2022CiscoEPSS 11.9%

  A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This