CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2024-20399

Cisco NX-OS Software contains a CLI command injection vulnerability (CVE-2024-20399) that could allow an authenticated administrator to execute arbitrary root commands on the underlying OS. The issue arises from insufficient validation of parameters passed to specific configuration CLI commands, ...

CVE-2013-0149

CVE-2013-0149: The OSPF implementation in Cisco IOS (12.0–12.4, 15.0–15.3), IOS-XE 2.x–3.9.xS, ASA/PIX 7.x–9.1, FWSM, NX-OS, and StarOS before 14.0.50488 fails to properly validate LSA type 1 packets before updating the LSA database, enabling remote attackers to cause a denial of service (routing...

CVE-2022-20623

Cisco NX-OS for Nexus 9000 Series is affected by CVE-2022-20623 due to a logic error in the Bidirectional Forwarding Detection (BFD) rate limiter. An unauthenticated, remote attacker can send a crafted traffic stream to cause BFD traffic drops and BFD session flaps, leading to route instability a...

CVE-2021-1229

Summary of CVE-2021-1229 (Cisco NX-OS ICMPv6 DoS) Cisco NX-OS Software is affected by an ICMP Version 6 (ICMPv6) processing vulnerability that can allow an unauthenticated, remote attacker to cause a slow memory leak in the ICMPv6 process. The issue stems from improper error handling when an IPv6...

CVE-2022-20624

Cisco NX-OS Software vulnerability CVE-2022-20624 affects the Cisco Fabric Services over IP (CFSoIP) feature. The issue arises from insufficient validation of incoming CFSoIP packets, which could let an unauthenticated, remote attacker cause the affected device to reload, resulting in a DoS. The ...

CVE-2020-10136

CVE-2020-10136 concerns the IP Encapsulation within IP (IPIP) decapsulation path that decapsulates and routes IP-in-IP traffic without validation of the source network packets, enabling spoofing and potential access-control bypass and other unexpected behavior. The NVD entry assigns a MEDIUM seve...

CVE-2017-6770

CVE-2017-6770 affects Cisco IOS, ASA, NX-OS, and IOS XE platforms (OSPF LSA database). The issue enables an unauthenticated, remote attacker to seize control of the OSPF AS routing table by injecting crafted OSPF LSA type 1 packets, potentially intercepting or black-holing traffic. The vulnerabil...

CVE-2024-20267

CVE-2024-20267 describes a denial-of-service vulnerability in Cisco NX-OS Software related to MPLS traffic handling. The issue arises from insufficient error checking when processing an ingress MPLS frame, enabling an unauthenticated, remote attacker to send a crafted IPv6 packet encapsulated in ...

CVE-2023-20168

CVE-2023-20168 affects Cisco NX-OS Software, where TACACS+ and RADIUS remote authentication processing can trigger a device reload due to incorrect input validation when the directed request option is enabled. Exploitation involves entering a crafted string at the login prompt, potentially causin...

CVE-2022-20625

CVE-2022-20625 affects Cisco FXOS and Cisco NX-OS Software via the Cisco Discovery Protocol service. The root cause is improper handling of Cisco Discovery Protocol messages, allowing an unauthenticated, adjacent attacker to restart the CDP service and cause a DoS, with rare cases potentially reb...

CVE-2024-20294

Cisco NX-OS and FXOS LLDP DoS (CVE-2024-20294): A malformed LLDP frame could crash the LLDP service and potentially reload the device. Affected: Cisco FXOS Software and Cisco NX-OS Software. Attack requires adjacent access (direct Layer-2). Exploitation details and remediation are documented in C...

CVE-2020-3119

Summary (CVE-2020-3119) : The vulnerability affects Cisco NX-OS Software’s Cisco Discovery Protocol (CDP) parser. It allows an unauthenticated, adjacent attacker to send a crafted CDP packet, leading to a stack overflow and potentially executing arbitrary code with administrative privileges or tr...

CVE-2022-20650

CVE-2022-20650 affects Cisco NX-OS NX-API Command Injection. The issue arises from insufficient input validation in the NX-API, enabling an authenticated remote attacker to send a crafted HTTP POST to the NX-API and execute arbitrary commands with root privileges on the underlying OS. Impact is o...

CVE-2019-1649

CVE-2019-1649 concerns Cisco’s Secure Boot Trust Anchor module (TAm). The flaw stems from an improper check in the FPGA/ Trust Anchor bitstream handling, enabling an authenticated, local attacker with OS access to write a modified firmware image to the FPGA. Consequences include potential device ...

CVE-2024-20291

Cisco Nexus 3000/9000 NX-OS (standalone mode) contain a vulnerability in ACL programming for port-channel subinterfaces. Incorrect hardware programming during port-channel member port configuration can allow an unauthenticated, remote attacker to send traffic that should be blocked by the ACL on ...

CVE-2020-3120

CVE-2020-3120 affects Cisco FXOS, IOS XR, and NX-OS CDP handling. A missing check when processing Cisco Discovery Protocol messages could let an unauthenticated, adjacent attacker cause a device reload and DoS by sending crafted CDP packets (Layer 2). Impact per sources is DoS via memory exhausti...

CVE-2011-2569

Cisco NX-OS (Nexus OS) 4.2 and 5.0 and Cisco UCS software 1.4 and 2.0 are affected by CVE-2011-2569 due to improper sanitization of user input in CLI options, enabling authenticated, local users to escalate privileges via unspecified vectors. Root cause: insufficient restriction of command-line o...

CVE-2024-20321

CVE-2024-20321 affects Cisco NX-OS Software’s eBGP implementation. The issue arises because eBGP traffic is mapped to a shared hardware rate-limiter queue, enabling an unauthenticated, remote attacker to cause a DoS by sending large volumes of traffic with specific characteristics, potentially dr...

CVE-2021-1368

CVE-2021-1368 affects Cisco FXOS and NX-OS UDLD. The vulnerability stems from insufficient input validation in the Unidirectional Link Detection (UDLD) feature, allowing an unauthenticated, adjacent attacker to send crafted UDLD packets to trigger either arbitrary code execution with administrati...

CVE-2023-20050

CVE-2023-20050 affects Cisco NX-OS Software CLI, where insufficient validation of CLI arguments allows an authenticated, local attacker to inject commands and run arbitrary OS commands with the privileges of the logged-in user. Multiple connected sources (Cisco advisory, Nessus/NES plugins, and C...

CVE-2016-1409

CVE-2016-1409 affects Cisco's IPv6 Neighbor Discovery (ND) implementation in Cisco IOS XE (2.1–3.17S), IOS XR (2.0.0–5.3.2), and NX-OS. The issue allows remote attackers to cause a denial of service (packet-processing outage) by sending crafted ND messages. The vulnerability is tied to ND process...

CVE-2023-20089

Cisco Nexus 9000 Series Fabric Switches in ACI Mode are affected by CVE-2023-20089 due to an incorrect error check when parsing ingress LLDP packets, allowing an unauthenticated adjacent attacker to cause a memory leak that can lead to a device reload and DoS. The attack requires a steady stream ...

CVE-2019-1965

CVE-2019-1965 concerns Cisco NX-OS Software where the Virtual Shell (VSH) session management can fail to delete VSH processes after a remote management disconnect, leading to a memory leak and potential system DoS. The root cause is improper deletion of VSH processes when a remote management conn...

CVE-2020-3397

CVE-2020-3397 is a vulnerability in the Cisco NX-OS software’s Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation. The issue arises from incomplete input validation of a specific BGP MVPN update message, which could be exploited by an unauthenticated, remote attacker to cause an af...

CVE-2023-20115

CVE-2023-20115 affects Cisco Nexus 3000 and 9000 Series Switches running in standalone NX-OS mode. The issue is a logic error in the SFTP server when verifying the user role after an SFTP connection is opened. An authenticated, non-administrator user could read or overwrite files on the device’s ...

CVE-2020-3172

CVE-2020-3172 affects Cisco FXOS Software and Cisco NX-OS Software via the Cisco Discovery Protocol. Insufficient validation of CDP packet headers allows an unauthenticated, Layer-2 adjacent attacker to send a crafted CDP packet, causing a buffer overflow that could let the attacker execute arbit...

CVE-2020-3228

Cisco IOS, IOS XE, and NX-OS Software are affected by CVE-2020-3228 via the Security Group Tag Exchange Protocol (SXP). The issue stems from crafted SXP packets being mishandled, allowing an unauthenticated, remote attacker to trigger a reload and cause a DoS. Connected sources corroborate the sa...

CVE-2020-3165

Cisco NX-OS Software CVE-2020-3165 is a BGP MD5 authentication bypass in which MD5 authentication can be bypassed if the peer does not have MD5 configured while the NX-OS device does, and the VRF name exceeds 19 characters. An unauthenticated, remote attacker could establish a BGP session with th...

CVE-2020-3517

The CVE-2020-3517 issue affects Cisco FXOS and NX-OS Software, specifically the Cisco Fabric Services component. The vulnerability arises from insufficient error handling when parsing Cisco Fabric Services messages, enabling an unauthenticated attacker to trigger process crashes that could result...

CVE-2023-20169

CVE-2023-20169 affects Cisco NX-OS Software on Nexus 3000 and Nexus 9000 switches in standalone NX-OS mode. The issue arises from insufficient input validation when parsing ingress IS-IS packets, allowing an unauthenticated, Layer-2 adjacent attacker to trigger an IS-IS process restart and cause ...

CVE-2024-20284

CVE-2024-20284 : Cisco NX-OS Software contains a vulnerability in the Python interpreter that allows an authenticated, low-privileged, local attacker to escape the Python sandbox and run arbitrary commands on the underlying OS due to insufficient validation of user input. The attack requires Pyth...

CVE-2019-1967

Cisco NX-OS Software is affected by CVE-2019-1967 due to excessive resource usage when logging drops for Mode 7 NTP packets, enabling a remote attacker to cause high CPU/memory usage and possible reboots via a flood of Mode 7 NTP traffic. The issue impacts the NTP feature (enabled by default). Re...

CVE-2021-1361

CVE-2021-1361 affects Cisco NX-OS on Nexus 3000/9000 switches in standalone NX-OS mode. A misconfigured TCP port 9075 allows unauthenticated remote attackers to create, delete, or overwrite arbitrary files with root privileges, including adding user accounts. Cisco’s advisory (cisco-sa-3000-9000-...

CVE-2019-1901

Cisco Nexus 9000 Series ACI Mode Switch Software contains a LLDP-related buffer overflow (CVE-2019-1901) due to improper TLV field input validation. Affected on Nexus 9000 Fabric Switches in ACI mode running before 13.2(7f) or any 14.x release. Exploitation requires a directly connected interface...

CVE-2019-1963

Cisco FXOS and NX-OS Software are affected by CVE-2019-1963 in the SNMP input packet processor. The issue arises from improper validation of ASN.1-encoded SNMP variables, allowing an authenticated, remote attacker to trigger the SNMP daemon to restart, potentially causing multiple restarts and a ...

CVE-2020-3174

Cisco NX-OS Software Anycast Gateway vulnerability (CVE-2020-3174) allows an unauthenticated, adjacent attacker to corrupt ARP tables by sending a malicious gratuitous ARP (GARP) on the local subnet due to improper validation. Real-world impact is ARP entry corruption for nonlocal IPs, potentiall...

CVE-2021-1231

Cisco Nexus 9000 Series Fabric Switches in ACI mode are affected by CVE-2021-1231 due to incomplete validation of the LLDP source, enabling an unauthenticated adjacent attacker to disable switching on an SFP interface and disrupt traffic. Affected components are LLDP handling on Nexus 9000 device...

CVE-2019-12662

CVE-2019-12662 affects Cisco NX-OS Software and Cisco IOS XE Software. The issue is improper signature verification during installation of an Open Virtual Appliance (OVA) image, allowing an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a maliciou...

CVE-2019-1858

Summary (CVE-2019-1858) : A vulnerability in the SNMP input packet processor on Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, leading to repeated restarts and a DoS condition. Root cause is imprope...

CVE-2021-1591

CVE-2021-1591 affects Cisco Nexus 9500 Series Switches. The issue is in the EtherChannel port subscription logic where ACLs applied to port-channel interfaces can be oversubscribed, allowing an unauthenticated remote attacker to bypass ACL rules configured on the device. Cisco’s advisory (Cisco N...

CVE-2020-3170

The CVE-2020-3170 entry covers Cisco NX-OS Software NX-API Denial of Service. Affected component: NX-API feature. Root cause: incorrect validation of the HTTP header in requests to NX-API. Impact: unauthenticated, remote attacker can cause the NX-API system process to restart, resulting in a DoS ...

CVE-2020-3175

Cisco’s CVE-2020-3175 affects Cisco NX-OS Software on Cisco MDS 9000 Series Multilayer Switches. The issue is due to improper resource usage control in the resource handling system, allowing an unauthenticated, remote attacker to trigger a denial of service by sending traffic to the mgmt0 interfa...

CVE-2024-20285

Cisco NX-OS Software Python sandbox escape (CVE-2024-20285) affects the Python interpreter in NX-OS, where insufficient validation of user input allows an authenticated, low-privileged local attacker to escape the Python sandbox and execute commands on the underlying OS with the attacker’s privil...

CVE-2009-0627

The CVE-2009-0627 entry concerns Cisco NX-OS on Nexus 5000 platforms (before 4.0(1a)N2(1)). It describes an unspecified vulnerability that lets remote attackers crash the device via a sequence of TCP packets related to TCP state manipulation, possibly linked to CVE-2008-4609 (sockstress). The con...

CVE-2019-1962

The CVE-2019-1962 issue affects Cisco NX-OS Software, specifically the Cisco Fabric Services over IP (CFSoIP) component. The root cause is insufficient validation of TCP packets processed by CFSoIP, which could let an unauthenticated, remote attacker send a malicious CFSoIP TCP packet to trigger ...

CVE-2019-1615

CVE-2019-1615 concerns Cisco NX-OS Software Image Signature Verification. Affected: Nexus 3000 Series switches; Nexus 9000 Series Fabric Switches in ACI Mode; Nexus 9000 Series in Standalone NX-OS Mode; Nexus 9500 R‑Series Line Cards and Fabric Modules. Root cause: improper verification of digita...

CVE-2020-3454

CVE-2020-3454 – Cisco NX-OS Call Home command injection is a network-remote flaw in the Call Home feature of Cisco NX-OS Software. The issue stems from insufficient input validation of Call Home configuration parameters when using HTTP, allowing an authenticated, remote attacker to modify setting...

CVE-2019-1593

Cisco NX-OS Software contains a vulnerability in the Bash shell implementation that allows a locally authenticated attacker to bypass RBAC and escalate privileges by executing commands intended for higher-privilege roles. The issue stems from an incorrect Bash shell command implementation that by...

CVE-2020-3217

The CVE-2020-3217 issue affects Cisco IOS, IOS XE, IOS XR, and NX-OS platforms using the One Platform Kit (onePK) Topology Discovery Service. The root cause is insufficient length restrictions when parsing Cisco Discovery Protocol messages, allowing an unauthenticated adjacent attacker to trigger...