Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

275 records

Priority LOW 37

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00194 Published 2024-08-28 No fix listed CWE-693
Priority LOW 37

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00194 Published 2024-08-28 No fix listed CWE-653
Priority LOW 37

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00194 Published 2024-08-28 No fix listed CWE-693
Priority CRITICAL 89KEV

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected devi…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.04306 Published 2024-07-01 No fix listed CWE-78
Priority LOW 29

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an aff…

CVSS 3.1MEDIUM 6.6 Adjacent network No auth User interaction EPSS 0.00318 Published 2024-02-28 No fix listed CWE-805
Priority LOW 34

A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to send tr…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.0089 Published 2024-02-28 No fix listed CWE-284
TI-2024-13202 CVE-2024-20267 · GHSA-r2c7-g2vh-f84m

Buffer overflow in Cisco NX-OS Software

Priority MEDIUM 45

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop proce…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00926 Published 2024-02-28 No fix listed CWE-120
Priority MEDIUM 44

A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00709 Published 2024-02-28 No fix listed CWE-400
Priority LOW 25

A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from t…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00579 Published 2023-08-23 No fix listed CWE-671
Priority LOW 32

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allo…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00326 Published 2023-08-23 No fix listed CWE-788
TI-2023-06874 CVE-2023-20168 · GHSA-fgh5-3xv7-c973

Buffer overflow in Cisco NX-OS Software

Priority LOW 31

A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly reload.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00237 Published 2023-08-23 No fix listed CWE-120
Priority LOW 32

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00296 Published 2023-02-23 No fix listed CWE-789
Priority LOW 34

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00251 Published 2023-02-23 No fix listed CWE-78
Priority MEDIUM 57

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic t…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.11859 Published 2022-02-23 No fix listed CWE-399
Priority MEDIUM 57

A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.12404 Published 2022-02-23 No fix listed CWE-400
Priority LOW 26

A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service…

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.0326 Published 2022-02-23 No fix listed CWE-399
Priority MEDIUM 56

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1455 Published 2022-02-23 No fix listed CWE-78
Priority LOW 33

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjac…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00389 Published 2021-09-23 No fix listed CWE-20
Priority LOW 34

A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass access control list (ACL) rules that are configured on an affected…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00999 Published 2021-08-25 No fix listed CWE-284
Priority LOW 33

A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of s…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01355 Published 2021-08-25 No fix listed CWE-787
Priority MEDIUM 46

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected dev…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01316 Published 2021-08-25 No fix listed CWE-126
Priority MEDIUM 47

A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01681 Published 2021-08-25 No fix listed CWE-115
Priority MEDIUM 48

A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to unexpe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02453 Published 2021-08-25 No fix listed CWE-345
Load more