[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxBzh21uLOWw_dr_VJuipgBnK2kPJcn-a99HX3MQh_Nc":3,"g5a-family:cisco\u002Fmds_9148s":103,"g5a-ex:cisco\u002Fmds_9148s@*":104},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":75,"seoMetadata":81,"meta":100},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","mds_9148s",0,27,1,"2024-07-01",[],"Mds 9148s by Cisco is a technology product and 27 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,24,31,38,45,50,55,60,65,70],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":4,"epssScore":23},"CVE-2024-20399","A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode",6,"v3.1","Medium",0.04306,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":21,"severity":22,"isKev":29,"epssScore":30},"CVE-2022-20625","A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability by sending a series of malicious Cisco Discovery Protocol messages to an affected device. A successful exploit could allow the attacker to cause the Cisco Discovery Protocol service to fail and restart. In rare conditions, repeated failures of the process could occur, which could cause the entire device to restart.","2022-02-23",4.3,false,0.0326,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":21,"severity":36,"isKev":29,"epssScore":37},"CVE-2019-1858","A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly. The vulnerability is due to improper error handling when processing inbound SNMP packets. An attacker could exploit this vulnerability by sending multiple crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the SNMP application to leak system memory because of an improperly handled error condition during packet processing. Over time, this memory leak could cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.","2019-05-16",8.6,"High",0.0239,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":43,"severity":36,"isKev":29,"epssScore":44},"CVE-2019-1962","A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient validation of TCP packets when processed by the Cisco Fabric Services over IP (CFSoIP) feature. An attacker could exploit this vulnerability by sending a malicious Cisco Fabric Services TCP packet to an affected device. A successful exploit could allow the attacker to cause process crashes, resulting in a device reload and a DoS condition. Note: There are three distribution methods that can be configured for Cisco Fabric Services. This vulnerability affects only distribution method CFSoIP, which is disabled by default. See the Details section for more information.","2019-08-28",7.5,"v3.0",0.01983,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":35,"cvssVersion":21,"severity":36,"isKev":29,"epssScore":49},"CVE-2020-3175","A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource usage control. An attacker could exploit this vulnerability by sending traffic to the management interface (mgmt0) of an affected device at very high rates. An exploit could allow the attacker to cause unexpected behaviors such as high CPU usage, process crashes, or even full system reboots of an affected device.","2020-02-26",0.01969,{"cveId":51,"description":52,"publishedDate":48,"cvssScore":53,"cvssVersion":21,"severity":36,"isKev":29,"epssScore":54},"CVE-2020-3172","A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The vulnerability exists because of insufficiently validated Cisco Discovery Protocol packet headers. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to a Layer 2-adjacent affected device. A successful exploit could allow the attacker to cause a buffer overflow that could allow the attacker to execute arbitrary code as root or cause a DoS condition on the affected device. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Note: This vulnerability is different from the following Cisco FXOS and NX-OS Software Cisco Discovery Protocol vulnerabilities that Cisco announced on Feb. 5, 2020: Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability and Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability.",8.8,0.01894,{"cveId":56,"description":57,"publishedDate":48,"cvssScore":58,"cvssVersion":21,"severity":22,"isKev":29,"epssScore":59},"CVE-2020-3170","A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the Cisco NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default.",5.3,0.01744,{"cveId":61,"description":62,"publishedDate":41,"cvssScore":63,"cvssVersion":43,"severity":22,"isKev":29,"epssScore":64},"CVE-2019-1963","A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of Abstract Syntax Notation One (ASN.1)-encoded variables in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the SNMP daemon on the affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.",6.5,0.01647,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":63,"cvssVersion":21,"severity":22,"isKev":29,"epssScore":69},"CVE-2020-3120","A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).","2020-02-05",0.01639,{"cveId":71,"description":72,"publishedDate":41,"cvssScore":73,"cvssVersion":21,"severity":36,"isKev":29,"epssScore":74},"CVE-2019-1965","A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no system memory available, this can cause unexpected system behaviors and crashes. The vulnerability is due to the VSH process not being properly deleted when a remote management connection to the device is disconnected. An attacker could exploit this vulnerability by repeatedly performing a remote management connection to the device and terminating the connection in an unexpected manner. A successful exploit could allow the attacker to cause the VSH processes to fail to delete, which can lead to a system-wide denial of service (DoS) condition. The attacker must have valid user credentials to log in to the device using the remote management connection.",7.7,0.01528,[76],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"severity":22,"isKev":4,"epssScore":23,"cisaVulnName":77,"cisaDateAdded":78,"cisaShortDescription":79,"cisaRequiredAction":80},"Cisco NX-OS Command Injection Vulnerability","2024-07-02","Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Mds 9148s by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mds 9148s by Cisco with 27 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Mds 9148s vulnerabilities, Mds 9148s security, Mds 9148s CVE, Cisco Mds 9148s, Mds 9148s threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Mds 9148s KEV, Mds 9148s exploited vulnerabilities",{"@context":86,"@type":87,"name":88,"description":83,"url":89,"manufacturer":90,"applicationCategory":94,"softwareVersion":95,"mainEntity":96},"https:\u002F\u002Fschema.org","SoftwareApplication","Mds 9148s","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fmds_9148s",{"@type":91,"name":92,"url":93},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":97,"name":98,"description":99,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mds 9148s Security Vulnerabilities","Security vulnerabilities affecting Mds 9148s by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":101,"apiVersion":102},"2026-10-18T21:43:45.516Z","3.0",[],{"rows":105,"total":11,"capped":29,"failed":9},[106],{"cveId":18,"name":77,"severity":22,"cvss":20,"added":78,"epss":23,"published":107,"ranges":108,"checked":4,"hits":109,"covers":29},"2024-07-01T17:15:04.383",[],[]]