Cisco Nexus 9336PQ ACI Spine

Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability

Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.

Cisco NX-OS Software Call Home Command Injection Vulnerability

Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998.

Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability

Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability

Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability

Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability

Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability

Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability

The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via crafted IPv4 DHCP packets to the (1) DHCPv4 relay agent or (2) smart relay agent, aka Bug IDs CSCuq24603, CSCur93159, CSCus21693, and CSCut76171.

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735)

Cisco NX-OS Software Virtualization Manager Command Injection Vulnerability

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability

Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability

Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability

Cisco NX-OS Software NX-API Denial of Service Vulnerability

Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability

Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability

Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability

Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability

Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability

Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417.

Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang) via large files that are copied to a device's filesystem, aka Bug ID CSCuu77225.

Cisco NX-OS Software CLI Command Injection Vulnerability