Priority MEDIUM 56
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of serv…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03955 · Published 2018-06-21 · No fix listed CWE-399
Priority MEDIUM 53
An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to ex…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08684 · Published 2016-01-22 · No fix listed CWE-78
Priority MEDIUM 48
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to lea…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0239 · Published 2019-05-16 · No fix listed CWE-20
Priority MEDIUM 48
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0254 · Published 2019-03-07 · Fixed in 2.0.1.201, 2.2.2.54 +7 CWE-20
Priority MEDIUM 48
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0254 · Published 2019-03-07 · Fixed in 2.0.1.201, 2.2.2.54 +5 CWE-20
Priority MEDIUM 46
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) con…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01383 · Published 2020-08-27 · No fix listed CWE-476
Priority MEDIUM 45
A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbi…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03802 · Published 2017-11-02 · No fix listed CWE-20
Priority MEDIUM 45
A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0445 · Published 2017-10-19 · No fix listed CWE-770
Priority MEDIUM 44
A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (Do…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01894 · Published 2020-02-26 · No fix listed CWE-20
Priority MEDIUM 44
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02691 · Published 2018-06-21 · No fix listed CWE-399
Priority MEDIUM 43
A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01975 · Published 2018-06-21 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (…
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01039 · Published 2018-06-21 · No fix listed CWE-20
Priority MEDIUM 41
A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected devi…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00556 · Published 2020-10-21 · No fix listed CWE-352
Priority MEDIUM 41
A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition w…
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00788 · Published 2018-10-17 · Fixed in 6.2(1), <2.3.1.58 CWE-20
Priority MEDIUM 40
A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileg…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00457 · Published 2021-02-24 · No fix listed CWE-787
Priority LOW 38
A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS).
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00898 · Published 2020-02-26 · No fix listed CWE-78
Priority LOW 38
Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with r…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00905 · Published 2019-10-02 · No fix listed CWE-20
Priority LOW 36
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2020-10-21 · No fix listed CWE-78
Priority LOW 36
A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00348 · Published 2020-10-21 · No fix listed CWE-693
Priority LOW 36
A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00427 · Published 2018-06-21 · No fix listed CWE-20
Priority LOW 35
A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00764 · Published 2017-04-07 · No fix listed CWE-78
Priority LOW 35
A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an a…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00764 · Published 2017-04-07 · No fix listed CWE-78
Priority LOW 33
A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjac…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00389 · Published 2021-09-23 · No fix listed CWE-20
Priority LOW 33
A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC) Software, and Cisco FXOS Software could all…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01879 · Published 2019-10-02 · No fix listed CWE-400
Priority LOW 33
A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local…
CVSS 3.0HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00775 · Published 2017-04-07 · No fix listed CWE-78
Load more