NX-OS vulnerabilities | LiveThreat CVE Feed

Product

NX-OS

by Cisco · last CVE Aug 28, 2024

On CISA KEVExploited in the wild

274

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities274 In the news0 Timeline

Severity mix

Critical 5High 97Medium 97Low 1

Severity

All severities274 Critical5 High97 Medium97 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add NX-OS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-1595	6.5	1%	Mar 6	Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability Affected: before 7.3\(5\)n1\(1\)
CVE-2018-0331	6.5	1%	Jun 21	A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an… Affected: 7.1 before 7.1\(5\)n1\(1\); 7.3 before 7.3\(3\)n1\(1\); 6.0; 7.0; 7.2; 6.2 before 6.2\(20\); +12 more
CVE-2018-0299	6.5	2%	Jun 21	A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco NX-OS on the Cisco Nexus 4000 Series Switch could allow an authenticated, remote attacker to… Affected: 4.1(2)e1(1r)
CVE-2018-0291	6.5	2%	Jun 20	A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP… Affected: 6.0 before 7.3\(3\)n1\(1\); 6.2 before 8.1\(2\); before 7.0\(3\)i3; 7.0\(3\)i4 before 7.0\(3\)i7\(1\); before 7.0\(3\)i3; 7.0\(3\)i4 before 7.0\(3\)i7\(1\); +4 more
CVE-2017-6655	6.5	1%	Jun 13	A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of… Affected: 8.0(1)s2; 8.3(0)cv(0.833)
CVE-2016-6457	6.5	1%	Nov 19	A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent attacker to cause a… Affected: 11.2(2g); 11.2(2h); 11.2(2i); 11.2(3c); 11.2(3e); 11.2(3h); +9 more
CVE-2016-1454	6.5	3%	Oct 6	Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of… Affected: before 6.0\(2\)u6\(7\); 6.1 before 7.0\(3\)i4\(1\); before 7.1\(4\)n1\(1\); 7.2 before 7.2\(2\)n1\(1\); 7.3 before 7.3\(0\)n1\(1\); before 5.2; +6 more
CVE-2016-1465	6.5	1%	Jul 28	Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen) via… Affected: 4.0(4)sv1(1); 4.0(4)sv1(2); 4.0(4)sv1(3); 4.0(4)sv1(3a); 4.0(4)sv1(3b); 4.0(4)sv1(3c); +15 more
CVE-2019-1732	6.4	0%	May 15	A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a… Affected: 7.0\(3\) before 7.0\(3\)f3\(5\)
CVE-2017-12335	6.3	1%	Nov 30	A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 7.0(0)hsk(0.357); 8.1(0)bd(0.20); 8.1(1)
CVE-2017-12330	6.3	1%	Nov 30	A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 7.0(0)hsk(0.357); 8.1(0)bd(0.20); 8.1(1)
CVE-2017-12329	6.3	1%	Nov 30	A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to perform a command… Affected: 5.2(1)sv3(2.8); 8.0(1); 8.1(0)bd(0.20); 8.1(0.2)s0
CVE-2017-3804	6.1	1%	Jan 26	A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an… Affected: 7.1(3)n1(2.1); 7.1(3)n1(3.12); 7.3(2)n1(0.296); 8.0(1)s2
CVE-2019-1729	6.0	0%	May 15	A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any… Affected: before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); 7.0\(3\) before 7.0\(3\)f3\(5\)
CVE-2017-12338	6.0	0%	Nov 30	A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files Affected: 8.0(1); 8.1(0)bd(0.20); 8.1(1)
CVE-2011-4667	5.9	1%	Sep 25	The encryption library in Cisco IOS Software 15.2(1)T, 15.2(1)T1, and 15.2(2)T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS 9000 18/4-Port Multiservice… Affected: 5.0(5)
CVE-2024-20291	5.8	1%	Feb 29	A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode could allow an… Affected: 9.3(10); 9.3(11); 9.3(12)
CVE-2017-12351	5.7	0%	Nov 30	A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the scope of the guest… Affected: 7.0(3)i7(1); 8.1(0)bd(0.20)
CVE-2017-12339	5.7	1%	Nov 30	A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 7.0(0)hsk(0.357); 8.0(1); 8.1(0)bd(0.20)
CVE-2019-1734	5.5	0%	Nov 5	A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive… Affected: before 6.2\(7\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(6\); before 6.0\(2\)a4\(1\); 7.0\(3\)i4 before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(6\); +5 more
CVE-2023-20115	5.4	1%	Aug 23	A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote… Affected: 9.2(1); 9.2(2); 9.2(2t); 9.2(2v); 9.2(3); 9.2(4); +24 more
CVE-2019-1733	5.4	1%	May 15	A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 7.0\(3\)i7 before 7.0\(3\)i7\(4\)
CVE-2021-1591	5.3	1%	Aug 25	A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass access control list (ACL)… Affected: 9.3(4)
CVE-2021-1590	5.3	1%	Aug 25	A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to… Affected: 7.0(3)i4(0.116); 7.3(7)n1(1b)
CVE-2021-1229	5.3	1%	Feb 24	A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory leak, which over time… Affected: 5.2(1)sv5(1.3a); 8.4(3.53); 15.1(2.31)
CVE-2020-10136	5.3	29%	Jun 2	IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and… Affected: 5.2(1)sk3(1.1); 5.2(1)sk3(2.1); 5.2(1)sk3(2.1a); 5.2(1)sk3(2.2); 5.2(1)sk3(2.2b); 5.2(1)sm1(5.1); +34 more
CVE-2020-3170	5.3	2%	Feb 26	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart Affected: before 8.4\(1\); before 8.2\(5\)
CVE-2019-1969	5.3	1%	Aug 30	A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated,… Affected: 7.0(3)i7(3); 9.2(2); 7.0(3)f; 9.2; 9.2(2)
CVE-2018-0395	5.3	1%	Oct 17	A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… Affected: 6.0(4); 6.1(3)s2; r231; 12.3(1e); 3.2(3d)c
CVE-2017-3879	5.3	3%	Mar 17	A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote… Affected: 7.0(3)i3(0.170); 8.3(0)cv(0.342); 8.3(0)cv(0.345)
CVE-2017-3878	5.3	3%	Mar 17	A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated,… Affected: 7.0(3)i3(0.170)
CVE-2017-3875	5.3	2%	Mar 17	An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated,… Affected: 5.2(4); 6.1(3)s5; 6.1(3)s6; 6.2(1.121)s0; 7.2(1)d1(1); 7.3(0)zn(0.161); +1 more
CVE-2021-1231	4.7	0%	Feb 24	A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated,… Affected: 11.0(1b); 11.0(1c); 11.0(1d); 11.0(1e); 11.0(2j); 11.0(2m); +34 more
CVE-2020-3174	4.7	0%	Feb 26	A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution… Affected: 8.1(1); 8.4(1); 9.3(1)
CVE-2019-1589	4.6	0%	May 3	A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could… Affected: 8.3(0)sk(0.39)
CVE-2021-1583	4.4	0%	Aug 25	A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an… Affected: 14.2(7f)
CVE-2019-1808	4.4	0%	May 15	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a… Affected: 7.3 before 8.1\(1a\); 8.2 before 8.3\(1\); 7.2 before 7.3\(3\)d1\(1\); 8.0 before 8.2\(3\)
CVE-2019-1731	4.4	0%	May 15	A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all… Affected: before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); before 6.0\(2\)a8\(10\); 7.0\(3\)i4 before 7.0\(3\)i7\(4\); before 7.3\(4\)n1\(1\); 7.0\(3\) before 7.0\(3\)f3\(5\)
CVE-2019-1600	4.4	0%	Mar 7	Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability Affected: 8.2 before 8.3\(1\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\) before 7.0\(3\)i7\(4\); 7.0\(3\)f3 before 7.0\(3\)f3\(5\); 7.2 before 7.3\(3\)n1\(1\); 8.0 before 8.2\(3\); +10 more
CVE-2019-1588	4.4	0%	Mar 6	Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerability Affected: before 14.0\(1h\)
CVE-2017-12332	4.4	0%	Nov 30	A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations Affected: 8.1(0)bd(0.20); 8.1(1)
CVE-2022-20625	4.3	3%	Feb 23	A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to… Affected: 8.2(7.34); 5.2(1)sv5(1.3b); 9.3(8.15); 4.0(1a)a; 4.1(3f)c
CVE-2021-1367	4.3	0%	Feb 24	A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)… Affected: 9.3(5)
CVE-2019-1587	4.3	1%	May 3	A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, remote attacker to access sensitive… Affected: 8.3(0)sk(0.39)
CVE-2017-12340	4.2	0%	Nov 30	A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could… Affected: 8.1(0.70)s0
CVE-2017-12336	4.2	0%	Nov 30	A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain… Affected: 6.0(2)a8(3); 8.0(1); 8.1(0)bd(0.20); 8.1(0.2)s0; 8.1(0.59)s0; 8.1(1)s5
CVE-2017-6770	4.2	2%	Aug 7	Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability… Affected: 1.1(0.825a); 1.1(1g)