CVE-2020-3217 Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...

CVE-2020-3217

The CVE-2020-3217 issue affects Cisco IOS, IOS XE, IOS XR, and NX-OS platforms using the One Platform Kit (onePK) Topology Discovery Service. The root cause is insufficient length restrictions when parsing Cisco Discovery Protocol messages, allowing an unauthenticated adjacent attacker to trigger...

Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...

Cisco NX-OS Software Code Issue Vulnerability

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A code issue vulnerability exists in Cisco NX-OS Software, which arises when the program unblocks and manipulates IP addresses in IP packets sent to locally configured IP...

Cisco Releases Security Updates for NX-OS Software

Cisco has released security updates to address a vulnerability in NX-OS Software. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Cisco Security...

Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass certain security boundaries or cause a denial of service DoS condition on an affected device. The vulnerability is due to the affected device unexpectedly decapsulating and...

Cisco NX-OS Software Sensitive File Read Information Disclosure Vulnerability (cisco-sa-20190515-nxos-fxos-info)

According to its self-reported version, Cisco Firepower Extensible Operating System FXOS is affected by following vulnerability - A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX- OS Software could allow an authenticated, local attacker to view...

Cisco NX-OS Software Sensitive File Read Information Disclosure Vulnerability (cisco-sa-20190515-nxos-fxos-info)

According to its self-reported version, Cisco Nexus Operating System NX-OS is affected by following vulnerability - A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX- OS Software could allow an authenticated, local attacker to view sensitive...

Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability (cisco-sa-20190515-nxos-rpm-injec)

According to its self-reported version, Cisco NX-OS Software is affected by following vulnerability - A vulnerability in the Remote Package Manager RPM subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check,...

Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.

Summary Public disclosed vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches. Vulnerability Details CVEID: CVE-2020-3175 DESCRIPTION: Cisco MDS 9000 Series Multilayer Switches is vulnerable to a denial of service, caused by improper resource usage control in resource...

The vulnerability of the NX-API network operating system function of Cisco NX-OS routers allows attackers to compromise the accessibility of protected information.

The vulnerability of the NX-API network operating system of Cisco NX-OS routers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

Cisco FXOS Software Cisco Fabric Services Denial of Service Vulnerability (cisco-sa-20180620-nx-os-fabric-services-dos)

According to its self-reported version, Cisco FXOS Software is affected by a denial of service vulnerability in Cisco Fabric Services due to insufficient validation of packet data. An unauthenticated, remote attacker can exploit this issue, via a maliciously crafted Cisco Fabric Services packet, ...

Cisco NX-OS Software Netstack DoS (cisco-sa-20190306-nxos-netstack)

A denial of service DoS vulnerability exists in Cisco NX-OS Software due to allocating and freeing memory buffers in the network stack. An unauthenticated, remote attacker can exploit this issue by sending crafted TCP streams to an affected device in a sustained way. If the attacker is succesful...

Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Cisco NX-OS Software due to improper input validation of certain type, length, value TLV fields of the LLDP frame header. An unauthenticated, local attacker can exploit this issue, by sending a crafted LLDP packet to an interface on the targeted...

Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in Cisco NX-OS Software Border Gateway Protocol due to MD5 Authentication Bypass. An unauthenticated, remote attacker can exploit this, via by attempting to establish a BGP session with the NX-OS peer, to bypass authentication and execute arbitrary...

Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability (cisco-sa-20200226-nxos-arp)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Cisco Discovery Protocol feature due to insufficient validation of Cisco Discovery Protocol packet headers. An unauthenticated, adjacent attacker can exploit this, by sending a crafted Cisco Discove...

Cisco NX-OS Software NX-API Denial of Service Vulnerability

A denial of service DoS vulnerability exists in the NX-API feature of Cisco NX-OS due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An unauthenticated, remote attacker can exploit this issue, via a specially crafted HTTP request to NX-API, to cause the NX-API...

Cisco NX-OS Software Authenticated Simple Network Management Protocol DoS (cisco-sa-20180620-nxossnmp)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability in the Simple Network Management Protocol SNMP input packet processor due to improper validation of SNMP protocol data units PDUs in SNMP packets. An authenticated, remote attacker ca...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting FXOS, NX-OS, and Unified Computing System UCS software. A remote attacker could exploit some of these vulnerabilities to cause a denial-of-service condition. For updates addressing lower severity vulnerabilities, see the Cis...