Known vulnerabilities in Nexus 7000 Series Switches

Vendor: Cisco Systems, Inc
Software: Nexus 7000 Series Switches
Software CPE: cpe:2.3:h:cisco_systems:nexus_7000_series_switches:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nexus 7000 Series Switches Nexus 7000 Series Switches is affected by 25 known vulnerabilities: 1 high, 5 medium, 19 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114566 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20292		 CWE-78 Low
No
No
 - 29.08.2025 SB2025082978
#VU86915 - Memory corruption
CVE-2024-20294		 CWE-119 Medium
No
No
 - 29.02.2024 SB2024022925
SB2024061419
SB2024061703
and 1 more
#VU86912 - Memory corruption
CVE-2024-20267		 CWE-119 High
No
No
 - 29.02.2024 SB2024022913
SB2024061419
SB2024061703
and 1 more
#VU79968 - Improper input validation
CVE-2023-20168		 CWE-20 Low
No
No
 - 25.08.2023 SB2023082506
#VU72512 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20050		 CWE-78 Low
No
No
 8.4(7) 23.02.2023 SB2023022315
SB2023051945
SB2023072066
and 1 more
#VU67769 - Improper Access Control
CVE-2021-27861		 CWE-284 Low
No
No
 - 30.09.2022 SB2022093010
#VU67768 - Improper Access Control
CVE-2021-27853		 CWE-284 Low
No
No
 - 30.09.2022 SB2022093009
#VU66749 - Out-of-bounds read
CVE-2022-20823		 CWE-125 Medium
No
No
 - 24.08.2022 SB2022082440
#VU50951 - Out-of-bounds write
CVE-2021-1368		 CWE-787 Medium
No
No
 7.3.5 D1.1, 8.2.5 25.02.2021 SB2021022527
#VU50944 - Cross-Site Request Forgery (CSRF)
CVE-2021-1227		 CWE-352 Low
No
No
 7.3.5 D1.1, 8.2.5 25.02.2021 SB2021022521
#VU50943 - Missing release of memory after effective lifetime
CVE-2021-1387		 CWE-401 Medium
No
No
 7.3.5 D1.1, 8.2.5 25.02.2021 SB2021022520
#VU50942 - Missing release of memory after effective lifetime
CVE-2021-1229		 CWE-401 Medium
No
No
 7.3.5 D1.1, 8.2.5 25.02.2021 SB2021022519
#VU9491 - Permissions, Privileges, and Access Controls
CVE-2017-12332		 CWE-264 Low
No
No
 - 01.12.2017 SB2017120101
#VU9489 - Permissions, Privileges, and Access Controls
CVE-2017-12331		 CWE-264 Low
No
No
 - 01.12.2017 SB2017120101
#VU9488 - Command injection
CVE-2017-12330		 CWE-77 Low
No
No
 - 01.12.2017 SB2017120101
#VU9487 - Command injection
CVE-2017-12329		 CWE-77 Low
No
No
 - 01.12.2017 SB2017120101
SB2017120102
#VU9486 - Improper input validation
CVE-2017-12338		 CWE-20 Low
No
No
 - 01.12.2017 SB2017120101
#VU9485 - Permissions, Privileges, and Access Controls
CVE-2017-12342		 CWE-264 Low
No
No
 - 01.12.2017 SB2017120101
#VU9484 - Command injection
CVE-2017-12341		 CWE-77 Low
No
No
 - 01.12.2017 SB2017120101
#VU9516 - Improper input validation
CVE-2017-12340		 CWE-20 Low
No
No
 - 29.11.2017 SB2017120101


Showing elements 1 - 20 out of 25