Cisco Nexus 93108TC-FX

Cisco NX-OS Software Command Injection Vulnerability

Cisco NX-OS Software Line Card Command Injection Vulnerability

Cisco NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco NX-OS Software Command Injection Vulnerability

Cisco NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco NX-OS Software Command Injection Vulnerability

Cisco NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco NX-OS Software Command Injection Vulnerability

Cisco Nexus 9000 Series Fabric Switches ACI Mode Privilege Escalation Vulnerability

Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability

Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities

Cisco NX-OS CLI Command Software Image Signature Verification Vulnerability

Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability

Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities

Cisco NX-OS Software CLI Command Injection Vulnerability

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)

Cisco NX-OS Software Image Signature Verification Vulnerability

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device and having an authenticated user retrieve LLDP statistics from the affected device through CLI show commands or Simple Network Management Protocol (SNMP) requests. A successful exploit could allow the attacker to cause the LLDP service to crash and stop running on the affected device. In certain situations, the LLDP crash may result in a reload of the affected device. Note: LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol).

Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability

Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability

Cisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability

A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to send traffic that should be blocked through an affected device. This vulnerability is due to incorrect hardware programming that occurs when configuration changes are made to port channel member ports. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access network resources that should be protected by an ACL that was applied on port channel subinterfaces.

Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability

A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected device. This vulnerability is due to a logic error when verifying the user role when an SFTP connection is opened to an affected device. An attacker could exploit this vulnerability by connecting and authenticating via SFTP as a valid, non-administrator user. A successful exploit could allow the attacker to read or overwrite files from the underlying operating system with the privileges of the authenticated user. There are workarounds that address this vulnerability.

IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

Cisco NX-OS Software system login block-for Denial of Service Vulnerability

Cisco NX-OS Software SSH Key Information Disclosure Vulnerability

L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability

Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial of Service Vulnerability

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot Vulnerability

Cisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability

Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability