Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

275 records in Nx-os · all components

Priority CRITICAL 89KEV

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected devi…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.04306 Published 2024-07-01 No fix listed CWE-78
Priority HIGH 66

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.16712 Published 2018-06-20 No fix listed CWE-20
Priority MEDIUM 59

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.14283 Published 2019-03-07 Fixed in 5.2(1)SM3(2.1), 5.2(1)SV3(4.1a) +12 CWE-399
Priority MEDIUM 57

A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.12404 Published 2022-02-23 No fix listed CWE-400
Priority MEDIUM 57

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic t…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.11859 Published 2022-02-23 No fix listed CWE-399
Priority MEDIUM 56

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1455 Published 2022-02-23 No fix listed CWE-78
Priority MEDIUM 56

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of serv…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03955 Published 2018-06-21 No fix listed CWE-399
Priority MEDIUM 53

Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet he…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0807 Published 2016-10-06 No fix listed CWE-119
Priority MEDIUM 52

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0163 Published 2021-02-24 No fix listed CWE-552
Priority MEDIUM 50

A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.04014 Published 2018-10-17 No fix listed CWE-20
Priority MEDIUM 48

A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to unexpe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02453 Published 2021-08-25 No fix listed CWE-345
Priority MEDIUM 48

A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.04784 Published 2020-02-05 Fixed in 9.3(2) CWE-787
Priority MEDIUM 48

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to lea…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0239 Published 2019-05-16 No fix listed CWE-20
Priority MEDIUM 48

A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.02437 Published 2019-03-11 Fixed in 6.2(25), 8.1(1b) +9 CWE-20
Priority MEDIUM 48

Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0254 Published 2019-03-07 Fixed in 2.0.1.201, 2.2.2.54 +7 CWE-20
Priority MEDIUM 48

Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0254 Published 2019-03-07 Fixed in 2.0.1.201, 2.2.2.54 +5 CWE-20
TI-2018-00252 CVE-2018-0293 · GHSA-qc62-gwj8-9q46

Access control flaw in Cisco NX-OS unknown

Priority MEDIUM 48

A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04673 Published 2018-06-20 No fix listed CWE-264
Priority MEDIUM 47

A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01681 Published 2021-08-25 No fix listed CWE-115
Priority MEDIUM 47

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.28537 Published 2020-06-02 No fix listed CWE-290
Priority MEDIUM 47

A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP session to repeatedly reset, causing a parti…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01825 Published 2020-08-27 No fix listed CWE-20
Priority MEDIUM 47

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01969 Published 2020-02-26 No fix listed CWE-664
Priority MEDIUM 47

A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.01986 Published 2019-08-28 Fixed in 8.4(1) CWE-20
Priority MEDIUM 47

A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affec…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.01983 Published 2019-08-28 Fixed in 8.4(1) CWE-20
Load more
Open these records in search →