NX-OS vulnerabilities | LiveThreat CVE Feed

Product

NX-OS

by Cisco · last CVE Aug 28, 2024

On CISA KEVExploited in the wild

274

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities274 In the news0 Timeline

Severity mix

Critical 5High 97Medium 97Low 1

Severity

All severities274 Critical5 High97 Medium97 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add NX-OS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-20286	8.8	0%	Aug 28	A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized… Affected: 9.3(13)
CVE-2024-20285	8.8	0%	Aug 28	A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized… Affected: 9.3(13)
CVE-2024-20284	8.8	0%	Aug 28	A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized… Affected: 9.3(13)
CVE-2022-20650	8.8	15%	Feb 23	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges Affected: 10.2(1.72); 7.3(8)n1(0.4)
CVE-2021-1368	8.8	0%	Feb 24	A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute… Affected: 8.4(3.108); 8.4(3.117); 7.0(3)i5(2); 7.0(3)i7(9); 9.3(5); 7.3(8)n1(1); +1 more
CVE-2020-3415	8.8	1%	Aug 27	A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative… Affected: 4.0 before 4.0\(4h\)
CVE-2020-3217	8.8	1%	Jun 3	A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software… Affected: 6.0(2)a; 6.0(2)a4(1); 6.0(2)a4(2); 6.0(2)a4(3); 6.0(2)a4(4); 6.0(2)a4(5); +34 more
CVE-2020-3172	8.8	2%	Feb 26	A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code… Affected: 5.2(1)sv5(1.2); 5.2(1)sv5(1.2); 7.3(5)n1(1); 7.3(0)d1(0.140); 7.3(0)d1(0.146); 7.0(3)i3(0.191); +2 more
CVE-2020-3119	8.8	5%	Feb 5	A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a… Affected: 7.0\(3\)f2 before 9.3\(2\); 7.0\(3\)i before 7.0\(3\)i7\(8\); 7.1 before 7.3\(6\)n1\(1\); before 9.3\(2\); 14.0 before 14.2\(1j\)
CVE-2019-1901	8.8	1%	Jul 31	A vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an… Affected: before 13.2\(7f\); 14.0\(1h\) through 14.1\(2g\); 14.0\(1h\) through 14.1\(2g\)
CVE-2019-1614	8.8	4%	Mar 11	Cisco NX-OS Software NX-API Command Injection Vulnerability Affected: 8.2 before 8.3\(2\); 7.3 before 8.1\(1b\); 7.0\(3\)i5 before 7.0\(3\)i7\(4\); before 7.0\(3\)i4\(9\); 7.0\(3\) before 7.0\(3\)i7\(4\); 7.3 before 7.3\(4\)n1\(1\); +4 more
CVE-2018-0313	8.8	4%	Jun 21	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected… Affected: 7.0(0)hsk(0.357); 8.0(1)s20; 8.1(0)bd(0.20); 8.1(0.97)s0; 8.1(0)bd(0.20); 8.1(1)s5
CVE-2018-0303	8.8	1%	Jun 21	A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary… Affected: 7.0(0)hsk(0.357); 8.1(0.2)s0; 8.8(0.1); 8.0(1); 8.8(3.5)s0; 7.0(3)i4(7); +8 more
CVE-2018-0330	8.8	3%	Jun 20	A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote… Affected: 7.3 before 7.3\(3\)n1\(1\); 6.0; 7.0; 7.1; 7.2; 7.3 before 7.3.2d1; +15 more
CVE-2018-0293	8.8	5%	Jun 20	A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a… Affected: 6.0 before 7.3\(3\)n1\(1\); 7.3(2)n1(0.395); 8.1(0.112)s0; 7.0\(3\)i4 before 7.0\(3\)i7\(1\); 6.0 before 7.0\(3\)i7\(2\); 6.0 before 7.3\(3\)n1\(1\); +1 more
CVE-2018-0292	8.8	1%	Jun 20	A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary… Affected: 6.0 before 7.3\(3\)n1\(1\); 6.2 before 8.1\(2\); 12.1 before 13.1\(1i\); through 7.0\(3\)i4; 7.0\(3\)i5 before 7.0\(3\)i7\(1\); 6.0 before 7.3\(3\)n1\(1\); +1 more
CVE-2016-1302	8.8	2%	Feb 7	Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before… Affected: base
CVE-2024-20321	8.6	1%	Feb 29	A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service… Affected: 7.0(3)f1(1); 7.0(3)f2(1); 7.0(3)f2(2); 7.0(3)f3(1); 7.0(3)f3(2); 7.0(3)f3(3); +34 more
CVE-2024-20267	8.6	1%	Feb 29	A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart,… Affected: 6.0(2)a3(1); 6.0(2)a3(2); 6.0(2)a3(4); 6.0(2)a4(1); 6.0(2)a4(2); 6.0(2)a4(3); +34 more
CVE-2021-1588	8.6	1%	Aug 25	A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 7.0(3)i7(9); 8.4(1); 9.3(7)
CVE-2021-1587	8.6	2%	Aug 25	A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to… Affected: All versions, or not specified
CVE-2021-1586	8.6	2%	Aug 25	A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an… Affected: 15.0(2e); 15.1(1h)
CVE-2021-1523	8.6	1%	Aug 25	A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause a queue wedge… Affected: 13.2(3n); 14.2(4i)
CVE-2021-1387	8.6	1%	Feb 24	A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: 7.0(0)n1(1); 7.0(1)n1(1); 7.0(2)n1(1); 7.0(3)n1(1); 7.0(4)n1(1); 7.0(4)n1(1a); +34 more
CVE-2020-3517	8.6	1%	Aug 27	A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which… Affected: 6.0(2)a3(1); 6.0(2)a3(2); 6.0(2)a3(4); 6.0(2)a4(1); 6.0(2)a4(2); 6.0(2)a4(3); +34 more
CVE-2020-3398	8.6	2%	Aug 27	A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP… Affected: All versions, or not specified
CVE-2020-3397	8.6	2%	Aug 27	A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an… Affected: All versions, or not specified
CVE-2020-3228	8.6	2%	Jun 3	A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote… Affected: 5.2(1)sv3(3.1); 5.2(1)sv3(3.15); 5.2(1)sv3(4.1); 5.2(1)sv3(4.1a); 5.2(1)sv3(4.1b); 5.2(1)sv5(1.1); +3 more
CVE-2020-3175	8.6	2%	Feb 26	A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a… Affected: 6.2(1)
CVE-2019-1858	8.6	2%	May 16	A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote… Affected: before 8.1\(1\); before 7.0\(3\)i4\(8\); 7.0\(3\)i7 before 7.0\(3\)i7\(2\); 7.0\(3\) before 7.0\(3\)f3\(1\); before 7.1\(5\)n1\(1b\); 7.3 before 7.3\(4\)n1\(1a\); +8 more
CVE-2019-1599	8.6	14%	Mar 7	Cisco NX-OS Software Netstack Denial of Service Vulnerability Affected: 9.2 before 9.2\(2\); 7.0\(3\) before 7.0\(3\)i7\(5\); 7.0\(3\) before 7.0\(3\)f3\(5\); 7.2 before 7.3\(5\)n1\(1\); 8.3 before 8.3\(2\); 9.2 before 9.2\(2\); +15 more
CVE-2018-0378	8.6	4%	Oct 17	A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated,… Affected: 7.3(2)n1(0.8)
CVE-2017-3883	8.6	4%	Oct 19	A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could… Affected: 5.2; 6.2; 6.3; 7.3; 8.1; 8.2; +15 more
CVE-2020-3165	8.2	2%	Feb 26	A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX-OS Software could allow an unauthenticated, remote… Affected: 9.2(1); 9.2(2); 9.2(3); 9.3(1)
CVE-2021-1227	8.1	1%	Feb 24	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected… Affected: 8.4(2a); 8.4(3); 8.4(3)s19; 9.3(3)idi9(0.569); 7.3(8)n1(0.809)
CVE-2019-1590	8.1	1%	May 3	A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software… Affected: 8.3(0)sk(0.39); 14.1(0.90)
CVE-2015-0721	8.0	3%	Oct 6	Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users… Affected: 4.1.(2); 4.1.(3); 4.1.(4); 4.1.(5); 4.2(3); 4.2(4); +34 more
CVE-2023-20050	7.8	0%	Feb 23	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected… Affected: before 8.2\(9\); before 9.3\(10\); before 10.2\(4\)
CVE-2020-3394	7.8	0%	Aug 27	A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local… Affected: All versions, or not specified
CVE-2019-12717	7.8	0%	Sep 25	A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on… Affected: 6.0\(2\) before 7.0\(3\)i7\(6\); 9.2 before 9.2\(3\); 7.0\(3\)f before 9.2\(3\); 7.0 before 7.3\(5\)n1\(1\); 6.2 before 8.0\(1\)
CVE-2019-1966	7.8	0%	Aug 30	A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker… Affected: through 3.2; 4.0
CVE-2019-1735	7.8	1%	May 15	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating… Affected: before 8.3\(1\); before 7.0\(3\)i7\(6\); before 6.0\(2\)a8\(11\); 7.0\(3\)i4 before 7.0\(3\)i7\(6\); 7.3 before 7.3\(4\)n1\(1\); 6.2 before 6.2\(22\); +7 more
CVE-2019-1726	7.8	0%	May 15	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such… Affected: 5.2 before 6.2\(25\); 7.3 before 8.3\(2\); 7.0\(3\)i7 before 7.0\(3\)i7\(3\); before 6.0\(2\)a8\(11\); 7.0\(3\) before 7.0\(3\)i7\(3\); before 7.3\(4\)n1\(1\); +4 more
CVE-2019-1592	7.8	0%	May 3	A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated,… Affected: 14.1(0.90)
CVE-2019-1618	7.8	0%	Mar 11	Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution Vulnerability Affected: 7.0\(3\)i4 before 7.0\(3\)i7\(5\)
CVE-2019-1605	7.8	1%	Mar 8	Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability Affected: 7.3 before 8.1\(1\); before 6.0\(2\)a8\(8\); 7.0\(3\)i5 before 7.0\(3\)i7\(1\); 7.0\(3\)f3 before 7.0\(3\)f3\(5\); 7.2 before 7.3\(3\)d1\(1\); before 7.0\(3\)i4\(8\); +5 more
CVE-2019-1606	7.8	0%	Mar 8	Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606) Affected: 7.0\(3\)i7 before 7.0\(3\)i7\(4\); 7.0\(3\) before 7.0\(3\)i7\(4\)
CVE-2019-1603	7.8	0%	Mar 8	Cisco NX-OS Software Privilege Escalation Vulnerability Affected: before 7.0\(3\)i7\(4\); before 7.0\(3\)f3\(5\)
CVE-2019-1602	7.8	0%	Mar 8	Cisco NX-OS Software Privilege Escalation Vulnerability Affected: 7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\)f3 before 7.0\(3\)f3\(5\); 7.0\(3\)f1 before 7.0\(3\)f3\(5\); 7.0\(3\) before 7.0\(3\)f3\(5\)
CVE-2019-1604	7.8	0%	Mar 8	Cisco NX-OS Software Privilege Escalation Vulnerability Affected: before 7.0\(3\)i7\(4\); before 7.0\(3\)f3\(5\); after 8.2\(3\) before 8.3\(2\); after 6.22\(22\) before 8.2\(3\); before 6.2\(22\)