NX
Product
NX-OS
On CISA KEVExploited in the wild
274
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 97Medium 97Low 1
Watch
Add NX-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20399 In wildKEV | 6.7 | Jul 1 | Cisco NX-OS Software CLI Command Injection Vulnerability Affected: 6.2(2); 6.2(2a); 6.2(6); 6.2(6a); 6.2(6b); 6.2(8); +34 more |
| CVE-2017-12342 | 6.8 | Nov 30 | A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope… Affected: 7.0(0)hsk(0.357); 8.1(1) |
| CVE-2021-1584 | 6.7 | Aug 25 | A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to elevate privileges on… Affected: 14.2(7f) |
| CVE-2019-12662 | 6.7 | Sep 25 | A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a… Affected: 8.1(0.2)s0; 8.1(1); 8.1(1)s5; 8.1(0)bd(0.20) |
| CVE-2019-1780 | 6.7 | May 16 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary… Affected: 5.2 before 6.2\(25\); 7.3 before 8.1\(1b\); 8.2 before 8.3\(1\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); before 6.0\(2\)a8\(11\); +8 more |
| CVE-2019-1768 | 6.7 | May 16 | A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a… Affected: before 8.3\(1\) |
| CVE-2019-1813 | 6.7 | May 15 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a… Affected: 7.0\(3\)i1\(x\) before 7.0\(3\)i7\(5\); 9.2 before 9.2\(2\); 7.0\(3\) before 7.0\(3\)f3\(5\); 9.2 before 9.2\(2\); before 7.0\(3\)i7\(5\); 9.2 before 9.2\(2\) |
| CVE-2019-1812 | 6.7 | May 15 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a… Affected: 6.0\(2\) before 7.0\(3\)i7\(5\); 9.2 before 9.2\(2\); 7.0\(3\) before 7.0\(3\)f3\(5\); 9.2 before 9.2\(2\); before 7.0\(3\)i7\(5\); 9.2 before 9.2\(2\) |
| CVE-2019-1811 | 6.7 | May 15 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a… Affected: 6.0\(2\) before 7.0\(3\)i7\(5\); 9.2 before 9.2\(2\); 7.0\(3\) before 7.0\(3\)f3\(5\); 9.2 before 9.2\(2\); before 7.0\(3\)i7\(5\); 9.2 before 9.2\(2\) |
| CVE-2019-1810 | 6.7 | May 15 | A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local… Affected: 6.1\(2\)i3\(4\) before 7.0\(3\)i7\(5\); 7.0\(3\)i7\(5a\) before 9.2\(2\); 7.0\(3\)i3\(1\) before 7.0\(3\)i7\(1\); 7.0\(3\)i7\(2\) before 9.2\(1\); 7.0\(3\)i4\(1\) before 7.0\(3\)i7\(5\); 7.0\(3\)i7\(5a\) before 9.2\(2\); +2 more |
| CVE-2019-1809 | 6.7 | May 15 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a… Affected: 7.3 before 8.1\(1a\); 8.2 before 8.3\(1\); 7.2 before 7.3\(3\)d1\(1\); 8.0 before 8.2\(3\); 3.1 before 3.2\(3k\) |
| CVE-2019-1795 | 6.7 | May 15 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux… Affected: before 8.2\(3\); 8.3 before 8.3\(1\); before 7.0\(3\)i4\(8\); 7.0\(3\)i7 before 7.3\(3\)i7\(3\); before 6.0\(2\)a8\(11\); 7.0\(3\)i4 before 7.0\(3\)i4\(8\); +11 more |
| CVE-2019-1791 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated… Affected: 5.2 before 6.2\(25\); 7.3 before 8.2\(3\); 8.3 before 8.3\(1\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.3\(3\)i7\(6\); before 6.0\(2\)a8\(11\); +8 more |
| CVE-2019-1790 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the… Affected: 5.2 before 6.2\(25\); 7.3 before 8.1\(1b\); 8.2 before 8.2\(3\); 8.3 before 8.3\(1\); before 7.0\(3\)i4\(8\); 7.0\(3\)i7 before 7.3\(3\)i7\(3\); +7 more |
| CVE-2019-1784 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the… Affected: before 7.3\(5\)n1\(1\); 7.2 before 7.3\(3\)d1\(1\); 8.0 before 8.2\(3\); 8.3 before 8.3\(1\); before 4.0\(1a\) |
| CVE-2019-1783 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying… Affected: before 7.3\(4\)n1\(1\); 7.2 before 7.3\(3\)d1\(1\); 8.0 before 8.3\(1\) |
| CVE-2019-1782 | 6.7 | May 15 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: before 4.0\(1a\); 5.2 before 6.2\(25\); 7.3 before 8.3\(2\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); before 7.3\(4\)n1\(1\); +8 more |
| CVE-2019-1781 | 6.7 | May 15 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 5.2 before 6.2\(25\); 7.3 before 8.3\(2\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); before 7.3\(4\)n1\(1\); before 6.2\(22\); +8 more |
| CVE-2019-1779 | 6.7 | May 15 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 5.2 before 6.2\(25\); 7.3 before 8.1\(1b\); 8.2 before 8.3\(1\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); 7.0\(3\) before 7.0\(3\)f3\(5\); +4 more |
| CVE-2019-1778 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the… Affected: before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); 7.0\(3\) before 7.0\(3\)f3\(5\) |
| CVE-2019-1776 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a… Affected: before 8.2\(2\); 8.3 before 8.3\(1\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.3\(3\)i7\(4\); before 6.0\(2\)a8\(11\); 7.0\(3\)i4 before 7.0\(3\)i4\(9\); +7 more |
| CVE-2019-1775 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected… Affected: 5.2 before 6.2\(25\); 7.3 before 8.1\(1b\); 8.2 before 8.3\(1\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.3\(3\)i7\(4\); before 6.0\(2\)a8\(11\); +7 more |
| CVE-2019-1774 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected… Affected: 5.2 before 6.2\(25\); 7.3 before 8.1\(1b\); 8.2 before 8.3\(1\); before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.3\(3\)i7\(4\); before 6.0\(2\)a8\(11\); +7 more |
| CVE-2019-1769 | 6.7 | May 15 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying… Affected: before 7.0\(3\)i7\(6\); 7.0\(3\) before 7.0\(3\)f3\(5\) |
| CVE-2019-1767 | 6.7 | May 15 | A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a… Affected: before 8.3\(1\) |
| CVE-2019-1730 | 6.7 | May 15 | A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest… Affected: 7.0\(3\)i4 before 7.0\(3\)i4\(9\); 7.0\(3\)i7 before 7.0\(3\)i7\(4\); 8.1 before 8.3\(1\); 7.0\(3\) before 7.0\(3\)f3\(5\) |
| CVE-2019-1728 | 6.7 | May 15 | A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary… Affected: 8.1 before 8.1\(1b\); 8.2 before 8.3\(1\); 7.0\(3\)i7 before 7.0\(3\)i7\(3\); 6.0\(2\)a8 before 6.0\(2\)a8\(11\); 7.0\(3\) before 7.0\(3\)i7\(3\); 7.3 before 7.3\(4\)n1\(1\); +5 more |
| CVE-2019-1727 | 6.7 | May 15 | A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to… Affected: 5.2 before 8.1\(1b\); 8.2 before 8.3\(1\); 7.0\(3\)i4 before 7.0\(3\)i4\(8\); 7.0\(3\)i5 before 7.0\(3\)i7\(3\); 7.3 before 7.3\(4\)n1\(1\); 6.2 before 7.3\(3\)d1\(1\); +1 more |
| CVE-2019-1649 | 6.7 | May 13 | A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local… Affected: before 8.4.1; before 9.3\(2\); before 8.4.1 |
| CVE-2019-1615 | 6.7 | Mar 11 | Cisco NX-OS Software Image Signature Verification Vulnerability Affected: 7.0(3)i7(3); 9.2(1); 12.3(0.97); 7.0(3)i7(5) |
| CVE-2019-1613 | 6.7 | Mar 11 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613) Affected: 7.0(3)f3(3); 7.0(3)i7(2); 9.2(1); 7.0(3)i7(2); 8.2(1); 9.2(2) |
| CVE-2019-1612 | 6.7 | Mar 11 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612) Affected: 7.0\(3\) before 7.0\(3\)i7\(6\); 7.0\(3\)i5 before 7.0\(3\)i7\(6\); 7.0\(3\)f3 before 7.0\(3\)f3\(5\); before 7.0\(3\)f3\(5\); 7.0\(3\)f1 before 7.0\(3\)f3\(5\) |
| CVE-2019-1611 | 6.7 | Mar 11 | Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611) Affected: 7.3 before 8.3\(1\); 5.2 before 6.2\(25\); 7.0\(3\)i5 before 7.0\(3\)i7\(5\); before 7.0\(3\)i4\(9\); 7.0\(3\) before 7.0\(3\)i7\(5\); 7.2 before 7.3\(4\)n1\(1\); +7 more |
| CVE-2019-1610 | 6.7 | Mar 11 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610) Affected: 7.0\(3\) through 7.0\(3\)i7\(4\); before 7.0\(3\)i7\(4\) |
| CVE-2019-1608 | 6.7 | Mar 8 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1608) Affected: 8.2 before 8.3\(1\); 7.3 before 8.1\(1b\); 5.2 before 6.2\(27\); after 8.0 before 8.2\(3\); after 7.2 before 7.3\(3\)d1\(1\); before 6.2\(22\) |
| CVE-2019-1607 | 6.7 | Mar 8 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1607) Affected: 8.0 before 8.2\(3\); 7.2 before 7.3\(3\)d1\(1\); 6.2 before 6.2\(22\) |
| CVE-2019-1609 | 6.7 | Mar 8 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609) Affected: 8.2 before 8.3\(2\); 7.0\(3\) before 7.0\(3\)i7\(6\); 7.0\(3\)i5 before 7.0\(3\)i7\(6\); 7.0\(3\)f3 before 7.0\(3\)f3\(5\); 8.3 before 8.3\(2\); 7.0\(3\)i5 before 7.0\(3\)i7\(6\); +8 more |
| CVE-2018-0294 | 6.7 | Jun 20 | A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator… Affected: 7.3(2)n1(0.354); 5.2(1)sv3(1.10); 8.8(3.5)s0; 7.0(3)i2(4a); 7.0(3)i2(4a); 4.1(2)e1(1a) |
| CVE-2017-12341 | 6.7 | Nov 30 | A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 8.1(0.59)s0; 8.1(1) |
| CVE-2017-12334 | 6.7 | Nov 30 | A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 6.0(2)a8(3); 7.0(0)hsk(0.357); 8.1(0)bd(0.20); 8.1(0.59)s0; 8.1(1) |
| CVE-2017-12333 | 6.7 | Nov 30 | A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image Affected: 8.1(1) |
| CVE-2017-12331 | 6.7 | Nov 30 | A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch Affected: 8.1(1) |
| CVE-2017-12301 | 6.7 | Oct 19 | A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to… Affected: 7.0(3)i4(6); 8.1(0)bd(0.20); 7.3(2)d1(0.21); 8.0(0.74); 8.0(1); 8.1(0.70)s0; +4 more |
| CVE-2024-20294 | 6.6 | Feb 29 | A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a… Affected: 12.0(1m); 12.0(1n); 12.0(1o); 12.0(1p); 12.0(1q); 12.0(1r); +34 more |
| CVE-2023-20168 | 6.5 | Aug 23 | A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly… Affected: 9.3(11); 10.2(5) |
| CVE-2023-20089 | 6.5 | Feb 23 | A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an… Affected: 15.2(1g); 15.2(2e); 15.2(2f); 15.2(2g); 15.2(2h); 15.2(3e); +10 more |
| CVE-2021-1228 | 6.5 | Feb 24 | A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow… Affected: 11.0(1b); 11.0(1c); 11.0(1d); 11.0(1e); 11.0(2j); 11.0(2m); +34 more |
| CVE-2021-1389 | 6.5 | Feb 4 | A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices could allow an unauthenticated, remote attacker to… Affected: All versions, or not specified |
| CVE-2020-3120 | 6.5 | Feb 5 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent… Affected: 5.2 before 6.2\(29\); 7.3 before 8.4\(1a\); 5.2 before 5.2\(1\)sv5\(1.3\); through 5.2; before 5.2\(1\)sv3\(4.1b\); 7.0\(3\)f2 before 9.3\(2\); +8 more |
| CVE-2019-1963 | 6.5 | Aug 28 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote… Affected: 5.2 before 6.2\(29\); 7.3 before 8.4; before 13.2\(7k\); 14.0 before 14.0\(2c\); 14.1 before 14.1\(1i\); 7.0\(3\)f before 9.2\(3\); +17 more |