Known vulnerabilities in Cisco Nexus 9000 Series Switches in ACI Mode
Vendor:
Cisco Systems, Inc
Software CPE:
cpe:2.3:h:cisco_systems:cisco_nexus_9000_series_switches_in_aci_mode:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
16
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
10.3(2)
15.2(6e)
15.2(6g)
15.2(7f)
15.2(7g)
15.2(3e)
13.2(10f)
14.2(7l)
15.2(2f)
14.2(7f)
7.0(3)I7(9)
14.2(3j)
14.2(3q)
14.2(3n)
14.2(3l)
14.2(4i)
14.2(4p)
14.2(4o)
14.2(4k)
14.2(5k)
15.0(1k)
15.0(1l)
15.0(2e)
15.0(2h)
14.2(2.19)
14.1(2m)
14.2(5n)
14.2(5l)
14.2(6h)
14.2(6g)
14.2(6d)
15.1(1h)
15.1(2e)
15.1(3e)
14.1(2g)
14.2
14.1
14.0
13.2
13.1
14.2(1j)
4.2(0.167c)
13.2(7.224)
13.2(7b)
13.2(7f)
14.1(2i)
14.2(0.130)
14.2(0.132)
11.2
11.1
11.0
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86915 - Memory corruption CVE-2024-20294 |
CWE-119 | Medium | - | 29.02.2024 |
SB2024022925 SB2024061419 SB2024061703 and 1 more |
||
| #VU78013 - Improper Access Control CVE-2023-20185 |
CWE-284 | Medium | - | 07.07.2023 |
SB2023070704 |
||
| #VU72507 - Missing release of memory after effective lifetime CVE-2023-20089 |
CWE-401 | Low | 10.3(2), 15.2(6e), 15.2(6g), 15.2(7f), 15.2(7g) | 23.02.2023 |
SB2023022301 |
||
| #VU56101 - Improper Access Control CVE-2021-1583 |
CWE-284 | Low | 13.2.10f, 14.2.7l, 15.2.2f | 26.08.2021 |
SB2021082602 |
||
| #VU56100 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-1584 |
CWE-78 | Low | - | 26.08.2021 |
SB2021082601 |
||
| #VU50942 - Missing release of memory after effective lifetime CVE-2021-1229 |
CWE-401 | Medium | 7.0.3 I7.9 | 25.02.2021 |
SB2021022519 |
||
| #VU50939 - Improper input validation CVE-2021-1230 |
CWE-20 | Medium | 14.2.3j, 14.2.3l, 14.2.3n, 14.2.3q, 14.2.4i, 14.2.4k, 14.2.4o, 14.2.4p, 14.2.5k, 14.2.5l, 14.2.5n, 14.2.6d, 14.2.6g, 14.2.6h, 15.0.1k, 15.0.1l, 15.0.2e, 15.0.2h, 15.1.1h, 15.1.2e, 15.1.3e | 25.02.2021 |
SB2021022515 |
||
| #VU50938 - Improper Access Control CVE-2021-1228 |
CWE-284 | Low | 14.2.5l, 14.2.5n, 14.2.6d, 14.2.6g, 14.2.6h, 15.1.1h, 15.1.2e, 15.1.3e | 25.02.2021 |
SB2021022515 |
||
| #VU25009 - Out-of-bounds write CVE-2020-3119 |
CWE-787 | Low | 14.2.1j | 06.02.2020 |
SB2020020610 |
||
| #VU49026 - Integer overflow CVE-2020-3120 |
CWE-190 | Low | - | 05.02.2020 |
SB2020020539 |
||
| #VU20496 - Improper input validation CVE-2019-1977 |
CWE-20 | Medium | - | 02.09.2019 |
SB2019090213 |
||
| #VU19606 - Memory corruption CVE-2019-1901 |
CWE-119 | Medium | 4.2.0.167c, 13.2.7b, 13.2.7f, 13.2.7.224, 14.1.2i, 14.2.0.130, 14.2.0.132 | 01.08.2019 |
SB2019080103 |
||
| #VU785 - Improper input validation CVE-2015-6393 |
CWE-20 | Medium | - | 05.10.2016 |
SB2016100528 |
||
| #VU786 - Resource Management Errors CVE-2015-6392 |
CWE-399 | Medium | - | 05.10.2016 |
SB2016100529 |
||
| #VU788 - Improper input validation CVE-2016-1454 |
CWE-20 | Low | - | 05.10.2016 |
SB2016100531 |
||
| #VU791 - Resource Management Errors CVE-2015-6392 |
CWE-399 | Low | - | 05.10.2016 |
SB2016100533 |