Known vulnerabilities in Cisco Nexus 3000 Series Switches

Vendor: Cisco Systems, Inc
Software: Cisco Nexus 3000 Series Switches
Software CPE: cpe:2.3:h:cisco_systems:cisco_nexus_3000_series_switches:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 54
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Nexus 3000 Series Switches Cisco Nexus 3000 Series Switches is affected by 54 known vulnerabilities: 4 high, 21 medium, 29 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114566 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20292		 CWE-78 Low
No
No
 - 29.08.2025 SB2025082978
#VU114564 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20290		 CWE-200 Low
No
No
 - 29.08.2025 SB2025082954
#VU114491 - NULL Pointer Dereference
CVE-2025-20262		 CWE-476 Medium
No
No
 - 28.08.2025 SB2025082833
#VU114486 - Compiler Optimization Removal or Modification of Security-critical Code
CVE-2025-20241		 CWE-733 Medium
No
No
 - 28.08.2025 SB2025082818
#VU105092 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20161		 CWE-78 Low
No
No
 10.3(7), 10.4(4), 10.5(2) 27.02.2025 SB20250227195
#VU96612 - Protection Mechanism Failure
CVE-2024-20286		 CWE-693 Low
No
No
 - 29.08.2024 SB2024082916
#VU96611 - Protection Mechanism Failure
CVE-2024-20285		 CWE-693 Low
No
No
 - 29.08.2024 SB2024082916
#VU96610 - Protection Mechanism Failure
CVE-2024-20284		 CWE-693 Low
No
No
 - 29.08.2024 SB2024082916
#VU96608 - Missing Authorization
CVE-2024-20413		 CWE-862 Low
No
No
 - 29.08.2024 SB2024082904
#VU96607 - Privilege Defined With Unsafe Actions
CVE-2024-20411		 CWE-267 Low
No
No
 - 29.08.2024 SB2024082904
#VU96606 - NULL Pointer Dereference
CVE-2024-20446		 CWE-476 High
No
No
 - 29.08.2024 SB2024082903
#VU86915 - Memory corruption
CVE-2024-20294		 CWE-119 Medium
No
No
 - 29.02.2024 SB2024022925
SB2024061419
SB2024061703
and 1 more
#VU86912 - Memory corruption
CVE-2024-20267		 CWE-119 High
No
No
 - 29.02.2024 SB2024022913
SB2024061419
SB2024061703
and 1 more
#VU86911 - Improper Access Control
CVE-2024-20291		 CWE-284 Medium
No
No
 - 29.02.2024 SB2024022909
SB2024061419
SB2024061703
and 1 more
#VU79968 - Improper input validation
CVE-2023-20168		 CWE-20 Low
No
No
 - 25.08.2023 SB2023082506
#VU79941 - Business Logic Errors (3.0)
CVE-2023-20115		 CWE-840 Medium
No
No
 - 24.08.2023 SB2023082421
#VU79940 - Improper input validation
CVE-2023-20169		 CWE-20 Low
No
No
 - 24.08.2023 SB2023082418
#VU72512 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20050		 CWE-78 Low
No
No
 9.3(11), 10.3(2) 23.02.2023 SB2023022315
SB2023051945
SB2023072066
and 1 more
#VU67769 - Improper Access Control
CVE-2021-27861		 CWE-284 Low
No
No
 - 30.09.2022 SB2022093010
#VU67768 - Improper Access Control
CVE-2021-27853		 CWE-284 Low
No
No
 - 30.09.2022 SB2022093009


Showing elements 1 - 20 out of 54