NX
Product
NX-OS
On CISA KEVExploited in the wild
274
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 97Medium 97Low 1
Watch
Add NX-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-5496 | – | Sep 16 | Open Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to cause a denial of service (network-element reload) via a crafted packet, aka Bug ID… Affected: All versions, or not specified |
| CVE-2013-0149 | – | Aug 5 | The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488… Affected: All versions, or not specified |
| CVE-2013-3400 | – | Jul 10 | The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID… Affected: All versions, or not specified |
| CVE-2013-1213 | – | May 29 | Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor Module (VSM), which allows… Affected: All versions, or not specified |
| CVE-2013-1212 | – | May 29 | The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or… Affected: All versions, or not specified |
| CVE-2013-1211 | – | May 29 | Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote… Affected: All versions, or not specified |
| CVE-2013-1210 | – | May 29 | Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to… Affected: All versions, or not specified |
| CVE-2013-1209 | – | May 29 | The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly… Affected: All versions, or not specified |
| CVE-2013-1208 | – | May 29 | The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication, which… Affected: All versions, or not specified |
| CVE-2013-1226 | – | Apr 29 | The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a… Affected: All versions, or not specified |
| CVE-2013-1181 | – | Apr 25 | Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.0(3)N2(2), Nexus 3000 devices 5.x before 5.0(3)U3(2), and Unified Computing System (UCS) 6200 devices before 2.0(1w) allows… Affected: 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); 4.0(1a)n1(1a); +34 more |
| CVE-2013-1180 | – | Apr 25 | Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5)… Affected: 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); 4.0(1a)n1(1a); +34 more |
| CVE-2013-1179 | – | Apr 25 | Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000… Affected: 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); 4.0(1a)n1(1a); +34 more |
| CVE-2013-1178 | – | Apr 25 | Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and… Affected: 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); 4.0(1a)n1(1a); +34 more |
| CVE-2013-1122 | – | Feb 13 | Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause a denial of service (M1-Series module… Affected: 4.0; 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); 4.0(1a)n1(1a); +34 more |
| CVE-2012-6396 | – | Jan 19 | Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service… Affected: All versions, or not specified |
| CVE-2012-3051 | – | Sep 16 | Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka… Affected: 5.2; 6.1 |
| CVE-2012-1357 | – | Aug 6 | The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service… Affected: 5.0; 5.1 |
| CVE-2012-2469 | – | Aug 6 | Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows remote attackers to cause a denial of… Affected: 4.2; 5.0; 5.1; 5.2 |
| CVE-2011-4023 | – | May 3 | Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumption) via SNMP requests, aka Bug ID… Affected: 5.0; 5.0(2); 5.0(2)n1(1); 5.0(2)n2(1); 5.0(2)n2(1a); 5.0(2a); +10 more |
| CVE-2012-0352 | – | Feb 16 | Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5,… Affected: 4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); 4.0(1a)n1(1a); 4.0(1a)n2(1); +34 more |
| CVE-2011-2569 | – | Oct 27 | Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain… Affected: 4.2; 5.0 |
| CVE-2011-2581 | – | Sep 14 | The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not… Affected: 5.0(2); 5.0(3)n1(1); 5.0(3)n1(1a); 5.0(3)n1(1b) |
| CVE-2009-0627 | – | Sep 8 | Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1), when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service (crash) via an unspecified… Affected: through 4.0 |