CVE-2021-1228 Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability

A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...

CVE-2021-1228

CVE-2021-1228 affects Cisco Nexus 9000 Series Fabric Switches in ACI Mode . The issue arises in the LLDP setup phase of the infrastructure VLAN due to insufficient security requirements, enabling an unauthenticated, adjacent attacker to send a crafted LLDP packet and connect an unauthorised serve...

Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability

A vulnerability with the Border Gateway Protocol BGP for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service DoS condition. This...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial of Service Vulnerability

A vulnerability in the Link Layer Discovery Protocol LLDP for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable SFP interface. This vulnerability is due to...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability

A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...

Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite...

Cisco Application Policy Infrastructure Controller and Cisco Nexus 9000 Series Fabric Switches Security Vulnerabilities

The Cisco Application Policy Infrastructure Controller APIC and the Cisco Nexus 9000 Series Fabric Switches are both products of Cisco Corporation.The Cisco Application Policy The Cisco Application Policy Infrastructure Controller is an automated infrastructure deployment and governance solution,...

Cisco Nexus 9000 Series Fabric Switches 安全漏洞

The Cisco Nexus 9000 Series switches are modular and fixed-port network switches designed for data centers. A security vulnerability exists in the Cisco Nexus 9000 Series Fabric Switches that allows an unauthenticated, remote attacker to cause the routing process to crash. No details of the...

PT-2021-2178 · Cisco · Cisco Application Policy Infrastructure Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode affected versions not specified Description: A vulnerability in the fabric infrastructure VLAN connection establishment could allow an unauthenticated,...

PT-2021-2161 · Cisco · Cisco Nexus 9000 Series Fabric Switches

Name of the Vulnerable Software and Affected Versions: Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode affected versions not specified Description: A vulnerability in the Link Layer Discovery Protocol LLDP could allow an unauthenticated, adjacent attacker to disab...

Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches 安全漏洞

Cisco NX-OS Software and so on are products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus 9000 Series Switches is a 9000 series switch. A security vulnerabilit...

Denial of Service Vulnerability in Sensient Technologies Switch GW-9000-7548G

First established in 2013, Shenzhen Beijing Sense & Wink Technology Co. A denial of service vulnerability exists in GW-9000-7548G, which can be exploited by attackers to cause the device to crash...

Cisco UCS Manager 2.2(1d) Remote Command Execution

import sys, ssl, os, time import requests from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family WLAN Local Profiling DoS (cisco-sa-dclass-dos-VKh9D8k3)

According to its self-reported version, Cisco IOS XE is affected by a Denial of Service vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. This vulnerability is due to incorrect parsing of HTTP packets while performin...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family Improper Access Control (cisco-sa-ewlc-icmpv6-qb9eYyCR)

According to its self-reported version, Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Routers is affected by an improper access control vulnerability due to an incomplete access control list ACL being applied prior to RUN state. An attacker could exploit this...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family WPA Denial of Service (cisco-sa-wpa-dos-cXshjerc)

According to its self-reported version, IOS-XE is affected by a Denial of Service vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family and could allow an unauthenticated, adjacent attacker to cause denial of...

CVE-2020-24634

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI Aruba Networks AP Management protocol UDP port 8211 of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility...

CVE-2020-24637

Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000...

CVE-2020-24637

Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000...

Code injection

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI Aruba Networks AP Management protocol UDP port 8211 of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility...