Cisco Nexus 3500 any version

Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability

Cisco NX-OS Software NX-API Command Injection Vulnerability

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco NX-OS Software Netstack Denial of Service Vulnerability

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA processes prevent the NX-OS System Manager from receiving keepalive messages when an affected device receives a high rate of login attempts, such as in a brute-force login attack. System memory can run low on the FXOS devices under the same conditions, which could cause the AAA process to unexpectedly restart or cause the device to reload. An attacker could exploit this vulnerability by performing a brute-force login attack against a device that is configured with AAA security services. A successful exploit could allow the attacker to cause the affected device to reload. This vulnerability affects the following Cisco products if they are running Cisco FXOS or NX-OS System Software that is configured for AAA services: Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, Multilayer Director Switches, Nexus 1000V Series Switches, Nexus 1100 Series Cloud Services Platforms, Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System (UCS) 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCuq58760, CSCuq71257, CSCur97432, CSCus05214, CSCux54898, CSCvc33141, CSCvd36971, CSCve03660.

Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities

Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities

Cisco NX-OS Software Cisco Fabric Services Denial of Service Vulnerability

Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability

Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)

Cisco NX-OS Software Privilege Escalation Vulnerability

Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability

Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability

Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability

Cisco NX-OS Software Privilege Escalation Vulnerability

Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability

Cisco NX-OS Software Privilege Escalation Vulnerability

Cisco NX-OS Software CLI Command Injection Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability

Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)

Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient sanitization of user-supplied parameters that are passed to certain Python functions within the scripting sandbox of the affected device. An attacker could exploit this vulnerability to escape the scripting sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. To exploit this vulnerability, an attacker must have local access and be authenticated to the targeted device with administrative or Python execution privileges. These requirements could limit the possibility of a successful exploit. This vulnerability affects the following Cisco products if they are running Cisco NX-OS Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCvb86832, CSCvd86474, CSCvd86479, CSCvd86484, CSCvd86490, CSCve97102, CSCvf12757, CSCvf12804, CSCvf12815, CSCvf15198.

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612)

Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)

Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability

Cisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability

Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability

Cisco NX-OS Software CLI Command Injection Vulnerability

Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability

Cisco NX-OS Software Arbitrary File Overwrite Vulnerability

Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability