Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority CRITICAL 89KEV
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected devi…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.04306 · Published 2024-07-01 · No fix listed CWE-78
Priority HIGH 66
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.16712 · Published 2018-06-20 · No fix listed CWE-20
Priority MEDIUM 59
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.14283 · Published 2019-03-07 · Fixed in 5.2(1)SM3(2.1), 5.2(1)SV3(4.1a) +12 CWE-399
Priority MEDIUM 57
A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.12404 · Published 2022-02-23 · No fix listed CWE-400
Priority MEDIUM 57
A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic t…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.11859 · Published 2022-02-23 · No fix listed CWE-399
Priority MEDIUM 56
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.1455 · Published 2022-02-23 · No fix listed CWE-78
Priority MEDIUM 56
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of serv…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03955 · Published 2018-06-21 · No fix listed CWE-399
Priority MEDIUM 53
Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet he…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0807 · Published 2016-10-06 · No fix listed CWE-119
Priority MEDIUM 52
A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0163 · Published 2021-02-24 · No fix listed CWE-552
Priority MEDIUM 50
A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.04014 · Published 2018-10-17 · No fix listed CWE-20
Priority MEDIUM 48
A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to unexpe…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.02453 · Published 2021-08-25 · No fix listed CWE-345
Priority MEDIUM 48
A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.04784 · Published 2020-02-05 · Fixed in 9.3(2) CWE-787
Priority MEDIUM 48
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to lea…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0239 · Published 2019-05-16 · No fix listed CWE-20
Priority MEDIUM 48
A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition.
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.02437 · Published 2019-03-11 · Fixed in 6.2(25), 8.1(1b) +9 CWE-20
Priority MEDIUM 48
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0254 · Published 2019-03-07 · Fixed in 2.0.1.201, 2.2.2.54 +7 CWE-20
Priority MEDIUM 48
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0254 · Published 2019-03-07 · Fixed in 2.0.1.201, 2.2.2.54 +5 CWE-20
Priority MEDIUM 48
A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04673 · Published 2018-06-20 · No fix listed CWE-264
Priority MEDIUM 47
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01681 · Published 2021-08-25 · No fix listed CWE-115
Priority MEDIUM 47
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.28537 · Published 2020-06-02 · No fix listed CWE-290
Priority MEDIUM 47
A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP session to repeatedly reset, causing a parti…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01825 · Published 2020-08-27 · No fix listed CWE-20
Priority MEDIUM 47
A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulti…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01812 · Published 2020-08-27 · No fix listed CWE-20
Priority MEDIUM 47
A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01969 · Published 2020-02-26 · No fix listed CWE-664
Priority MEDIUM 47
A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device.
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.01986 · Published 2019-08-28 · Fixed in 8.4(1) CWE-20
Priority MEDIUM 47
A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affec…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.01983 · Published 2019-08-28 · Fixed in 8.4(1) CWE-20
Load more