Advisories · Technology

Cisco Nexus 3000 Series Switches.

Every CVE that names Cisco Nexus 3000 Series Switches among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-1616 CVE record

CVSS 8.6 High

Cisco NX-OS Software Cisco Fabric Services Denial of Service Vulnerability
- Cisco MDS 9000 Series Multilayer Switches
- Cisco Nexus 3000 Series Switches
- CWE-20
Not analysed yet 11 Mar 2019
CVE-2019-1615 CVE record

CVSS 6.7 Medium

Cisco NX-OS Software Image Signature Verification Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 9000 Series Fabric Switches in ACI Mode
- Weak cryptography or TLS
Not analysed yet 11 Mar 2019
CVE-2019-1614 CVE record

CVSS 8.8 High

Cisco NX-OS Software NX-API Command Injection Vulnerability
- Cisco MDS 9000 Series Multilayer Switches
- Cisco Nexus 3000 Series Switches
- Command injection
Not analysed yet 11 Mar 2019
CVE-2019-1613 CVE record

CVSS 4.2 Medium

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)
- Cisco MDS 9000 Series Multilayer Switches
- Cisco Nexus 3000 Series Switches
- Command injection
Not analysed yet 11 Mar 2019
CVE-2019-1612 CVE record

CVSS 4.2 Medium

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612)
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- Command injection
Not analysed yet 11 Mar 2019
CVE-2019-1611 CVE record

CVSS 4.2 Medium

Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)
- Cisco Firepower 4100 Series Next-Generation Firewalls
- Cisco Firepower 9300 Security Appliance
- Command injection
Not analysed yet 11 Mar 2019
CVE-2019-1610 CVE record

CVSS 4.2 Medium

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610)
- Cisco Nexus 3500 Platform Switches
- Cisco Nexus 3000 Series Switches
- Command injection
Not analysed yet 11 Mar 2019
CVE-2019-1609 CVE record

CVSS 4.2 Medium

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)
- Cisco MDS 9000 Series Multilayer Switches
- Cisco Nexus 3500 Platform Switches
- Command injection
Not analysed yet 8 Mar 2019
CVE-2019-1606 CVE record

CVSS 5.3 Medium

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)
- Cisco Nexus 9000 Series Switches in Standalone NX-OS Mode
- Cisco Nexus 3000 Series Switches
- Command injection
Not analysed yet 8 Mar 2019
CVE-2019-1605 CVE record

CVSS 7.8 High

Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability
- Cisco MDS 9000 Series Multilayer Switches
- Cisco Nexus 3000 Series Switches
- CWE-20
Not analysed yet 8 Mar 2019
CVE-2019-1604 CVE record

CVSS 7.3 High

Cisco NX-OS Software Privilege Escalation Vulnerability
- Cisco Nexus 7000 and 7700 Series Switches
- Cisco Nexus 3000 Series Switches
- Broken access control
Not analysed yet 8 Mar 2019
CVE-2019-1603 CVE record

CVSS 7.8 High

Cisco NX-OS Software Privilege Escalation Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- Broken access control
Not analysed yet 8 Mar 2019
CVE-2019-1602 CVE record

CVSS 7.8 High

Cisco NX-OS Software Privilege Escalation Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- CWE-264
Not analysed yet 8 Mar 2019
CVE-2019-1601 CVE record

CVSS 7.8 High

Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability
- Cisco MDS 9000 Series Multilayer Switches
- Cisco Nexus 3000 Series Switches
- Broken access control
Not analysed yet 8 Mar 2019
CVE-2019-1600 CVE record

CVSS 6.7 Medium

Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability
- Cisco Firepower 4100 Series Next-Generation Firewalls
- Cisco Firepower 9300 Series Next-Generation Firewalls
- CWE-264
Not analysed yet 7 Mar 2019
CVE-2019-1599 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Cisco NX-OS Software Netstack Denial of Service Vulnerability
- Cisco Nexus 1000V Switch for Microsoft Hyper-V
- Cisco Nexus 1000V Switch for VMware vSphere
- CWE-399
Not analysed yet 7 Mar 2019
CVE-2019-1598 CVE record

CVSS 8.6 High

Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities
- Cisco Firepower 4100 Series Next-Generation Firewalls
- Cisco Firepower 9300 Security Appliance
- CWE-20
Not analysed yet 7 Mar 2019
CVE-2019-1597 CVE record

CVSS 8.6 High

Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities
- Cisco Firepower 4100 Series Next-Generation Firewalls
- Cisco Firepower 9300 Security Appliance
- CWE-20
Not analysed yet 7 Mar 2019
CVE-2019-1596 CVE record

CVSS 7.8 High

Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- CWE-264
Not analysed yet 7 Mar 2019
CVE-2019-1594 CVE record

CVSS 7.4 High

Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability
- Cisco Nexus 1000V Switch for VMware vSphere
- Cisco Nexus 3000 Series Switches
- CWE-264
Not analysed yet 6 Mar 2019
CVE-2019-1593 CVE record

CVSS 7.8 High

Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- CWE-264
Not analysed yet 6 Mar 2019