Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass certain security boundaries or cause a denial of service DoS condition on an affected device. The vulnerability is due to the affected device unexpectedly decapsulating and...

Cisco NX-OS Software Sensitive File Read Information Disclosure Vulnerability (cisco-sa-20190515-nxos-fxos-info)

According to its self-reported version, Cisco Nexus Operating System NX-OS is affected by following vulnerability - A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX- OS Software could allow an authenticated, local attacker to view sensitive...

Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability (cisco-sa-20190515-nxos-rpm-injec)

According to its self-reported version, Cisco NX-OS Software is affected by following vulnerability - A vulnerability in the Remote Package Manager RPM subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check,...

Cisco NX-OS Software Sensitive File Read Information Disclosure Vulnerability (cisco-sa-20190515-nxos-fxos-info)

According to its self-reported version, Cisco Firepower Extensible Operating System FXOS is affected by following vulnerability - A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX- OS Software could allow an authenticated, local attacker to view...

Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.

Summary Public disclosed vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches. Vulnerability Details CVEID: CVE-2020-3175 DESCRIPTION: Cisco MDS 9000 Series Multilayer Switches is vulnerable to a denial of service, caused by improper resource usage control in resource...

The vulnerability of the NX-API network operating system function of Cisco NX-OS routers allows attackers to compromise the accessibility of protected information.

The vulnerability of the NX-API network operating system of Cisco NX-OS routers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

Cisco FXOS Software Cisco Fabric Services Denial of Service Vulnerability (cisco-sa-20180620-nx-os-fabric-services-dos)

According to its self-reported version, Cisco FXOS Software is affected by a denial of service vulnerability in Cisco Fabric Services due to insufficient validation of packet data. An unauthenticated, remote attacker can exploit this issue, via a maliciously crafted Cisco Fabric Services packet, ...

Cisco NX-OS Software Netstack DoS (cisco-sa-20190306-nxos-netstack)

A denial of service DoS vulnerability exists in Cisco NX-OS Software due to allocating and freeing memory buffers in the network stack. An unauthenticated, remote attacker can exploit this issue by sending crafted TCP streams to an affected device in a sustained way. If the attacker is succesful...

Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Cisco NX-OS Software due to improper input validation of certain type, length, value TLV fields of the LLDP frame header. An unauthenticated, local attacker can exploit this issue, by sending a crafted LLDP packet to an interface on the targeted...

Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in Cisco NX-OS Software Border Gateway Protocol due to MD5 Authentication Bypass. An unauthenticated, remote attacker can exploit this, via by attempting to establish a BGP session with the NX-OS peer, to bypass authentication and execute arbitrary...

Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability (cisco-sa-20200226-nxos-arp)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Cisco Discovery Protocol feature due to insufficient validation of Cisco Discovery Protocol packet headers. An unauthenticated, adjacent attacker can exploit this, by sending a crafted Cisco Discove...

Cisco NX-OS Software NX-API Denial of Service Vulnerability

A denial of service DoS vulnerability exists in the NX-API feature of Cisco NX-OS due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An unauthenticated, remote attacker can exploit this issue, via a specially crafted HTTP request to NX-API, to cause the NX-API...

Cisco NX-OS Software Authenticated Simple Network Management Protocol DoS (cisco-sa-20180620-nxossnmp)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability in the Simple Network Management Protocol SNMP input packet processor due to improper validation of SNMP protocol data units PDUs in SNMP packets. An authenticated, remote attacker ca...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting FXOS, NX-OS, and Unified Computing System UCS software. A remote attacker could exploit some of these vulnerabilities to cause a denial-of-service condition. For updates addressing lower severity vulnerabilities, see the Cis...

CVE-2020-3175

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper resource usage control. An...

CVE-2020-3170

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could...

CVE-2020-3174

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol ARP entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper...

CVE-2020-3174

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol ARP entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper...

CVE-2020-3175

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper resource usage control. An...