Priority LOW 37
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00194 · Published 2024-08-28 · No fix listed CWE-693
Priority LOW 37
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00194 · Published 2024-08-28 · No fix listed CWE-653
Priority LOW 37
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00194 · Published 2024-08-28 · No fix listed CWE-693
Priority CRITICAL 89KEV
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected devi…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.04306 · Published 2024-07-01 · No fix listed CWE-78
Priority LOW 29
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an aff…
CVSS 3.1MEDIUM 6.6· Adjacent network · No auth · User interaction · EPSS 0.00318 · Published 2024-02-28 · No fix listed CWE-805
Priority LOW 34
A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to send tr…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.0089 · Published 2024-02-28 · No fix listed CWE-284
Priority MEDIUM 45
A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop proce…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00926 · Published 2024-02-28 · No fix listed CWE-120
Priority MEDIUM 44
A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00709 · Published 2024-02-28 · No fix listed CWE-400
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority LOW 25
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from t…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00579 · Published 2023-08-23 · No fix listed CWE-671
Priority LOW 32
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allo…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00326 · Published 2023-08-23 · No fix listed CWE-788
Priority LOW 31
A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly reload.
CVSS 3.1HIGH 7.1· Local · No auth · No interaction · EPSS 0.00237 · Published 2023-08-23 · No fix listed CWE-120
Priority LOW 32
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00343 · Published 2023-07-12 · No fix listed CWE-330
Priority LOW 32
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00296 · Published 2023-02-23 · No fix listed CWE-789
Priority LOW 34
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00251 · Published 2023-02-23 · No fix listed CWE-78
Priority MEDIUM 57
A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic t…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.11859 · Published 2022-02-23 · No fix listed CWE-399
Priority MEDIUM 57
A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.12404 · Published 2022-02-23 · No fix listed CWE-400
Priority LOW 26
A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service…
CVSS 3.1MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.0326 · Published 2022-02-23 · No fix listed CWE-399
Priority MEDIUM 56
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.1455 · Published 2022-02-23 · No fix listed CWE-78
Priority LOW 33
A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjac…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00389 · Published 2021-09-23 · No fix listed CWE-20
Priority LOW 34
A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass access control list (ACL) rules that are configured on an affected…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00999 · Published 2021-08-25 · No fix listed CWE-284
Priority LOW 33
A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of s…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01355 · Published 2021-08-25 · No fix listed CWE-787
Priority MEDIUM 46
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected dev…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01316 · Published 2021-08-25 · No fix listed CWE-126
Priority MEDIUM 47
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01681 · Published 2021-08-25 · No fix listed CWE-115
Priority MEDIUM 48
A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to unexpe…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.02453 · Published 2021-08-25 · No fix listed CWE-345
Load more