NX-OS vulnerabilities | LiveThreat CVE Feed

Product

NX-OS

by Cisco · last CVE Aug 28, 2024

On CISA KEVExploited in the wild

274

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities274 In the news0 Timeline

Severity mix

Critical 5High 97Medium 97Low 1

Severity

All severities274 Critical5 High97 Medium97 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add NX-OS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-1601	7.8	0%	Mar 8	Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability Affected: 8.2 before 8.3\(1\); 7.0\(3\) before 7.0\(3\)i7\(4\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\)f3 before 7.0\(3\)f3\(5\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\)f1 before 7.0\(3\)f3\(5\); +11 more
CVE-2019-1596	7.8	0%	Mar 7	Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability Affected: before 7.0\(3\)i4\(9\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); 7.0\(3\)f3\(1\) before 7.0\(3\)f3\(5\); before 7.0\(3\)i4\(9\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); +1 more
CVE-2019-1591	7.8	1%	Mar 6	Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability Affected: before 14.0\(3d\)
CVE-2019-1593	7.8	0%	Mar 6	Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability Affected: 7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\)i4 before 7.0\(3\)i4\(9\); 7.0\(3\) before 7.0\(3\)i7\(4\); 7.0\(3\) before 7.0\(3\)f3\(5\); 8.1 before 8.2\(3\); 8.3 before 8.3\(1\); +5 more
CVE-2019-1585	7.8	0%	Mar 6	Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability Affected: 8.3(0)sk(0.39)
CVE-2018-0337	7.8	0%	Jun 21	A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected… Affected: 7.0(8)n1(1); 7.1(4)n1(1); 7.3(1)n1(0.6); 7.3(2)n1(0.350); 7.3(1)dx(0.119); 7.3(3)d1(0.2); +6 more
CVE-2018-0306	7.8	1%	Jun 21	A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device Affected: before 7.3\(3\)n1\(1\); 8.1(0.2)s0; 8.1(0)bd(0.20); 8.1(0.59)s0; 8.1(1); 6.0(2)a8(3); +4 more
CVE-2018-0302	7.8	0%	Jun 21	A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an… Affected: 3.1(1k)a
CVE-2018-0307	7.8	1%	Jun 20	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device Affected: 6.0 before 7.3\(3\)n1\(1\); 6.2 before 8.1\(2\); 8.2; before 7.0\(3\)i3; 7.0\(3\)i4 before 7.0\(3\)i7\(1\); before 7.0\(3\)i3; +3 more
CVE-2017-6650	7.8	1%	May 22	A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to… Affected: 7.1(1)n1(1); 7.1(2)n1(1); 7.1(3)n1(1); 7.1(3)n1(2); 7.1(3)n1(2.1); 7.1(3)n1(3.12); +6 more
CVE-2017-6649	7.8	1%	May 22	A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command… Affected: 7.1(1)n1(1); 7.1(2)n1(1); 7.1(3)n1(1); 7.1(3)n1(2); 7.1(3)n1(2.1); 7.1(3)n1(3.12); +6 more
CVE-2019-1965	7.7	2%	Aug 28	A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon… Affected: 5.2 before 6.2\(29\); 7.3 before 8.4; 7.0\(3\)f before 9.2; before 7.1\(5\)n1\(1b\); 7.3 before 7.3\(5\)n1\(1\); before 6.2\(22\); +9 more
CVE-2018-0456	7.7	3%	Oct 17	A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP… Affected: 9.2(0.43)
CVE-2018-0309	7.7	2%	Jun 21	A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (SNMP) MIB for Cisco NX-OS (in standalone NX-OS mode) on… Affected: 7.0(3)i5(2); 7.0(3)i6(1)
CVE-2022-20624	7.5	12%	Feb 23	A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 7.0(3); 9.2(2); 9.2(3); 9.3(3); 9.3(5); 4.1(1a)a; +1 more
CVE-2022-20623	7.5	12%	Feb 23	A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an… Affected: 7.0\(3\)i6\(2\) through 7.0\(3\)i7\(3\); 7.0\(3\)i6\(2\) through 9.3\(8\); 10.1\(1\) through 10.2\(1\)
CVE-2021-1230	7.5	2%	Feb 24	A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated,… Affected: 12.0(1m); 12.0(1n); 12.0(1o); 12.0(1p); 12.0(1q); 12.0(1r); +34 more
CVE-2020-3338	7.5	2%	Aug 27	A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a… Affected: All versions, or not specified
CVE-2020-3168	7.5	2%	Feb 26	A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected… Affected: 5.2(1)sv3(4.1a)
CVE-2019-1977	7.5	1%	Aug 30	A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated,… Affected: 12.3(1h); 13.1(2m); 13.1(2o); 13.1(2p)
CVE-2019-1968	7.5	2%	Aug 30	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart Affected: 7.3; 8.1; 8.2; 8.3; 6.1(2)i2; 6.1(2)i3; +17 more
CVE-2019-1967	7.5	2%	Aug 30	A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on… Affected: 6.2; 7.3; 8.1; 8.2; 8.3; 6.0(2)a8(9.7); +26 more
CVE-2019-1964	7.5	2%	Aug 28	A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an… Affected: 8.1 before 8.2\(3\); 8.3 before 8.4
CVE-2019-1962	7.5	2%	Aug 28	A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a… Affected: 5.2 before 6.2\(29\); 7.3 before 8.1; 7.0\(3\)f before 9.2; before 7.1\(5\)n1\(1b\); 7.3 before 7.3\(5\)n1\(1\); before 6.2\(22\); +7 more
CVE-2019-1616	7.5	2%	Mar 11	Cisco NX-OS Software Cisco Fabric Services Denial of Service Vulnerability Affected: 8.2 before 8.3\(1\); 7.0\(3\) before 7.0\(3\)i7\(4\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\)f3 before 7.0\(3\)f3\(3c\); 7.2 before 8.2\(3\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); +12 more
CVE-2019-1598	7.5	3%	Mar 7	Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities Affected: 7.3 before 8.2\(1\); 7.0\(3\)i5 before 7.0\(3\)i7\(1\); 7.0\(3\) before 7.0\(3\)i7\(2\); 8.0 before 8.2\(1\); 7.0\(3\)i5 before 7.0\(3\)i7\(1\); 7.2 before 7.3\(2\)d1\(1\); +6 more
CVE-2019-1597	7.5	3%	Mar 7	Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities Affected: before 8.2\(1\); before 7.0\(3\)i7\(1\); before 7.0\(3\)i7\(2\); after 7.3\(2\)d1\(1\) before 8.2\(1\); before 7.0\(3\)i7\(1\); after 6.2\(20\) before 7.3\(2\)d1\(1\); +2 more
CVE-2018-0372	7.5	3%	Jul 18	A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote… Affected: 13.0(1k)
CVE-2018-0311	7.5	3%	Jun 21	A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service… Affected: 7.0(0)hsk(0.357); 8.1(0.2)s0; 8.8(0.1); 8.0(1); 8.8(3.5)s0; 6.0(2)a8(9); +7 more
CVE-2018-0298	7.5	2%	Jun 21	A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected… Affected: 3.0\(2\) before 3.1\(3a\)a
CVE-2018-0295	7.5	2%	Jun 20	A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 6.0 before 7.3\(3\)n1\(1\); 6.2 before 8.1\(2\); before 7.0\(3\)i3; 7.0\(3\)i4 before 7.0\(3\)i7\(1\); before 7.0\(3\)i4; 7.0\(3\)i5 before 7.0\(3\)i6\(2\); +3 more
CVE-2018-0090	7.5	3%	Jan 18	A vulnerability in management interface access control list (ACL) configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured… Affected: 7.3(2)n1(0.6); 8.3(0)kms(0.31); 8.8(3.5)s0
CVE-2015-6393	7.5	3%	Oct 6	Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of… Affected: 4.2(1)n1(1); 4.2(1)n2(1); 4.2(1)n2(1a); 5.0(2)n1(1); 5.0(2)n2(1); 5.0(2)n2(1a); +34 more
CVE-2015-6392	7.5	3%	Oct 6	Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device… Affected: 4.1.(2); 4.1.(3); 4.1.(4); 4.1.(5); 4.2(3); 4.2(4); +34 more
CVE-2016-1455	7.5	2%	Oct 5	Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive… Affected: 7.0(3); 7.0(3)i1(1); 7.0(3)i1(1a); 7.0(3)i1(1b); 7.0(3)i1(2)
CVE-2016-1409	7.5	4%	May 29	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a… Affected: 1.0(1.110a); 1.0(1e); 1.0(2j); 1.1(0.825a); 1.1(1g); 4.0(0)n1(1a); +34 more
CVE-2016-1351	7.5	4%	Mar 26	The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload)… Affected: 4.1(2); 4.1(3); 4.1(4); 4.1(5); 4.2(2a); 4.2(3); +34 more
CVE-2015-0718	7.5	4%	Mar 3	Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of… Affected: base
CVE-2023-20169	7.4	0%	Aug 23	A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series… Affected: 10.3(2)
CVE-2023-20185	7.4	0%	Jul 12	A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to… Affected: 14.0(1h); 14.0(2c); 14.0(3c); 14.0(3d); 14.1(1i); 14.1(1j); +34 more
CVE-2021-34714	7.4	0%	Sep 23	A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS… Affected: through 8.4\(3.115\); through 7.0\(3\)i7\(9\); through 7.3\(8\)n1\(1\); through 3.2\(3o\)a; through 3.2\(3o\)a
CVE-2019-1617	7.4	1%	Mar 11	Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability Affected: 9.2 before 9.2\(2\); 7.0\(3\)i5 before 7.0\(3\)i7\(5\)
CVE-2019-1594	7.4	1%	Mar 6	Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability Affected: before 5.2\(1\)sv3\(1.4b\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); before 7.1\(5\)n1\(1b\); 8.3 before 8.3\(1\); before 13.2\(1l\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); +4 more
CVE-2018-0102	7.4	1%	Jan 18	A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of… Affected: 7.2(1)d(1); 7.2(2)d1(1); 7.2(2)d1(2)
CVE-2020-3454	7.2	3%	Aug 27	A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root… Affected: All versions, or not specified
CVE-2019-1836	7.1	0%	May 3	A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to… Affected: 14.0(3d)
CVE-2018-0092	7.1	0%	Jan 18	A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly delete valid user… Affected: 7.0(3)i5(2); 7.0(3)i6(1); 7.0(3)i7(1)