Known vulnerabilities in Cisco MDS 9000 Series Multilayer Switches
Vendor:
Cisco Systems, Inc
Software CPE:
cpe:2.3:h:cisco_systems:cisco_mds_9000_series_multilayer_switches:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
18
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
8.4(2f)S17
9.3(0.15)S0
9.3(1)MSM(0.96)
9.3(1.71)S0
9.3(2)
9.3(1.64)
7.1(1)
7.1(2)
7.2(1)
7.2(2)
7.2(2a)
7.2(3)
10.0(1)
10.1(1)
10.1(2)
10.2(1)
10.3(1)
10.4(1)
10.4(2)
11.0(1)
11.1(1)
11.2(1)
11.3(1)
11.4(1)
11.5(1)
11.5(2)
7.0(3)I4(0.116)
6.2(25)
7.0(3)F1(1)
7.0(3)I4(1)
7.3(2)D1(1A)
7.3(3)D1(1)
8.1(1b)
8.3(1)
7.0(3)I7(9)
6.2(24.7)S0
7.0(3)I6(1)
7.3(7)D1(0.12)
7.3(7)D1(1)
7.3(9)N1(0.824)
7.3(9)N1(1)
8.2(6.5)S0
8.4(3)
8.4(3)S16
8.4(3.53)
8.4(2.9)
8.4(2.8)
6.2(1)
8.2(1)
8.4(1)
7.3(6)D1(1)
8.2(6)
7.3
6.2
5.2
Vulnerabilities (18)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114566 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-20292 |
CWE-78 | Low | - | 29.08.2025 |
SB2025082978 |
||
| #VU96612 - Protection Mechanism Failure CVE-2024-20286 |
CWE-693 | Low | - | 29.08.2024 |
SB2024082916 |
||
| #VU96611 - Protection Mechanism Failure CVE-2024-20285 |
CWE-693 | Low | - | 29.08.2024 |
SB2024082916 |
||
| #VU96610 - Protection Mechanism Failure CVE-2024-20284 |
CWE-693 | Low | - | 29.08.2024 |
SB2024082916 |
||
| #VU86915 - Memory corruption CVE-2024-20294 |
CWE-119 | Medium | - | 29.02.2024 |
SB2024022925 SB2024061419 SB2024061703 and 1 more |
||
| #VU79968 - Improper input validation CVE-2023-20168 |
CWE-20 | Low | - | 25.08.2023 |
SB2023082506 |
||
| #VU72512 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-20050 |
CWE-78 | Low | 8.4(2f)S17, 9.3(0.15)S0, 9.3(1)MSM(0.96), 9.3(1.71)S0, 9.3(2) | 23.02.2023 |
SB2023022315 SB2023051945 SB2023072066 and 1 more |
||
| #VU56875 - Improper input validation CVE-2021-34714 |
CWE-20 | Medium | - | 24.09.2021 |
SB2021092427 |
||
| #VU56116 - Memory corruption CVE-2021-1590 |
CWE-119 | Medium | 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1 | 26.08.2021 |
SB2021082615 |
||
| #VU50951 - Out-of-bounds write CVE-2021-1368 |
CWE-787 | Medium | 7.0.3 I7.9 | 25.02.2021 |
SB2021022527 |
||
| #VU50944 - Cross-Site Request Forgery (CSRF) CVE-2021-1227 |
CWE-352 | Low | 7.0.3 I7.9 | 25.02.2021 |
SB2021022521 |
||
| #VU50942 - Missing release of memory after effective lifetime CVE-2021-1229 |
CWE-401 | Medium | 6.2.24.7 S0, 7.0.3 I6.1, 7.3.7 D1.0.12, 7.3.7 D1.1, 7.3.9 N1.0.824, 7.3.9 N1.1, 8.2.6.5 S0, 8.4.3, 8.4.3 S16 | 25.02.2021 |
SB2021022519 |
||
| #VU46108 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-3454 |
CWE-78 | Low | - | 27.08.2020 |
SB2020082720 |
||
| #VU46104 - NULL Pointer Dereference CVE-2020-3517 |
CWE-476 | Medium | 7.3.6 D1.1, 8.2.6 | 27.08.2020 |
SB2020082717 |
||
| #VU25659 - Improper input validation CVE-2020-3170 |
CWE-20 | Medium | - | 27.02.2020 |
SB2020022715 |
||
| #VU25653 - Resource exhaustion CVE-2020-3175 |
CWE-400 | High | - | 27.02.2020 |
SB2020022711 |
||
| #VU49026 - Integer overflow CVE-2020-3120 |
CWE-190 | Low | - | 05.02.2020 |
SB2020020539 |
||
| #VU780 - Permissions, Privileges, and Access Controls CVE-2015-0721 |
CWE-264 | Low | - | 05.10.2016 |
SB2016100524 |