SecOraLens
CriticalCVE

Cisco warns of critical flaws allowing Nexus switch takeover

BleepingComputer·Source published ·1 min read

What happened?

Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. [...]

Key details

  • Cisco identified five critical vulnerabilities in NX-OS.
  • Affected features include NX-API, NGOAM, and MPLS OAM.
  • Nexus 7000 and ACI mode Nexus 9000 switches are safe.
  • Cisco recommends disabling unused features to mitigate risks.

Affected

  • Nexus 3000 Series switches are affected.
  • Nexus 9000 Series switches are also affected.

Fixes and mitigations

  1. Upgrade NX-OS to a fixed version.

Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.

Back to all advisories