[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRYweaZQNFoSiqrfSq6LlAkb2xEmxlgnzZeBr2WLF7QE":3,"g5a-ex:cisco\u002Fnexus_1000v@*":130,"g5a-family:cisco\u002Fnexus_1000v":132},{"success":4,"data":5},true,{"product":6,"versions":35,"topVulnerabilitiesByEpss":45,"kevVulnerabilities":107,"seoMetadata":108,"meta":127},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":34},"cisco","nexus_1000v",9,36,0,"2023-08-23",[14,18,20,22,24,26,28,30,32],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.2\\(1\\)_sv1\\(4\\)",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"4.2\\(1\\)_sv1\\(4a\\)",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"4.2\\(1\\)_sv1\\(4b\\)",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"4.2\\(1\\)sv1\\(5.1\\)",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"4.2\\(1\\)sv1\\(5.1a\\)",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"4.2\\(1\\)sv1\\(5.2\\)",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"4.2\\(1\\)sv1\\(5.2b\\)",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"4.2\\(1\\)vsg1\\(1\\)",{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"5.2\\(1\\)sm1\\(5.1\\)","Nexus 1000v by Cisco is a technology product with 9 tracked versions and 36 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[36,37,38,39,40,41,42,43,44],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},[46,54,61,67,73,80,85,91,96,101],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":17,"epssScore":53},"CVE-2020-10136","IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.","2020-06-02",5.3,"v3.1","Medium",0.28537,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":51,"severity":59,"isKev":17,"epssScore":60},"CVE-2019-1599","A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to an issue with allocating and freeing memory buffers in the network stack. An attacker could exploit this vulnerability by sending crafted TCP streams to an affected device in a sustained way. A successful exploit could cause the network stack of an affected device to run out of available buffers, impairing operations of control plane and management plane protocols, resulting in a DoS condition. Note: This vulnerability can be triggered only by traffic that is destined to an affected device and cannot be exploited using traffic that transits an affected device. Nexus 1000V Switch for Microsoft Hyper-V is affected in versions prior to 5.2(1)SM3(2.1). Nexus 1000V Switch for VMware vSphere is affected in versions prior to 5.2(1)SV3(4.1a). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(6) and 9.2(2). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(11), 7.0(3)I7(6), and 9.2(2). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5) and 9.2(2). Nexus 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(5)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22. Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5) and 9.2(2). UCS 6200 and 6300 Series Fabric Interconnect are affected in versions prior to 3.2(3j) and 4.0(2a). UCS 6400 Series Fabric Interconnect are affected in versions prior to 4.0(2a).","2019-03-07",8.6,"High",0.14283,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":58,"cvssVersion":65,"severity":59,"isKev":17,"epssScore":66},"CVE-2017-3883","A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA processes prevent the NX-OS System Manager from receiving keepalive messages when an affected device receives a high rate of login attempts, such as in a brute-force login attack. System memory can run low on the FXOS devices under the same conditions, which could cause the AAA process to unexpectedly restart or cause the device to reload. An attacker could exploit this vulnerability by performing a brute-force login attack against a device that is configured with AAA security services. A successful exploit could allow the attacker to cause the affected device to reload. This vulnerability affects the following Cisco products if they are running Cisco FXOS or NX-OS System Software that is configured for AAA services: Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, Multilayer Director Switches, Nexus 1000V Series Switches, Nexus 1100 Series Cloud Services Platforms, Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System (UCS) 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCuq58760, CSCuq71257, CSCur97432, CSCus05214, CSCux54898, CSCvc33141, CSCvd36971, CSCve03660.","2017-10-19","v3.0",0.0445,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":51,"severity":52,"isKev":17,"epssScore":72},"CVE-2022-20625","A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability by sending a series of malicious Cisco Discovery Protocol messages to an affected device. A successful exploit could allow the attacker to cause the Cisco Discovery Protocol service to fail and restart. In rare conditions, repeated failures of the process could occur, which could cause the entire device to restart.","2022-02-23",4.3,0.0326,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":78,"severity":52,"isKev":17,"epssScore":79},"CVE-2015-0775","The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS 9000 devices, 6.2(12) on Nexus 7000 devices, 7.0(3) on Nexus 9000 devices, and 7.2(0)ZN(99.67) on Nexus 3000 devices allows remote attackers to cause a denial of service (login process reset) via an unspecified terminal-session request during TELNET session setup, aka Bug IDs CSCuo10554, CSCuu75466, CSCuu75471, CSCuu75484, CSCuu75498, CSCuu77170, and CSCuu77182.","2015-06-12",5,"v2",0.02966,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":58,"cvssVersion":51,"severity":59,"isKev":17,"epssScore":84},"CVE-2019-1858","A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly. The vulnerability is due to improper error handling when processing inbound SNMP packets. An attacker could exploit this vulnerability by sending multiple crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the SNMP application to leak system memory because of an improperly handled error condition during packet processing. Over time, this memory leak could cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.","2019-05-16",0.0239,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":51,"severity":59,"isKev":17,"epssScore":90},"CVE-2020-3172","A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The vulnerability exists because of insufficiently validated Cisco Discovery Protocol packet headers. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to a Layer 2-adjacent affected device. A successful exploit could allow the attacker to cause a buffer overflow that could allow the attacker to execute arbitrary code as root or cause a DoS condition on the affected device. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Note: This vulnerability is different from the following Cisco FXOS and NX-OS Software Cisco Discovery Protocol vulnerabilities that Cisco announced on Feb. 5, 2020: Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability and Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability.","2020-02-26",8.8,0.01894,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":58,"cvssVersion":51,"severity":59,"isKev":17,"epssScore":95},"CVE-2020-3228","A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because crafted SXP packets are mishandled. An attacker could exploit this vulnerability by sending specifically crafted SXP packets to the affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.","2020-06-03",0.01802,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":77,"cvssVersion":78,"severity":52,"isKev":17,"epssScore":100},"CVE-2013-1213","Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor Module (VSM), which allows remote attackers to cause a denial of service (false VEM unavailability report) via a flood of UDP packets, aka Bug ID CSCud14840.","2013-05-29",0.01753,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":51,"severity":52,"isKev":17,"epssScore":106},"CVE-2020-3120","A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).","2020-02-05",6.5,0.01639,[],{"title":109,"metaDescription":110,"keywords":111,"structuredData":112},"Nexus 1000v by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nexus 1000v by Cisco covering 9 versions with 36 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nexus 1000v vulnerabilities, Nexus 1000v security, Nexus 1000v CVE, Cisco Nexus 1000v, Nexus 1000v threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":113,"@type":114,"name":115,"description":110,"url":116,"manufacturer":117,"applicationCategory":121,"softwareVersion":122,"mainEntity":123},"https:\u002F\u002Fschema.org","SoftwareApplication","Nexus 1000v","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fnexus_1000v",{"@type":118,"name":119,"url":120},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","9 versions tracked",{"@type":124,"name":125,"description":126,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nexus 1000v Security Vulnerabilities","Security vulnerabilities affecting Nexus 1000v by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":128,"apiVersion":129},"2026-10-18T19:42:25.020Z","3.0",{"rows":131,"total":11,"capped":17,"failed":11},[],[133,136,138,140,142,144,146],{"product":134,"cves":135},"nexus_1000v_for_vmware_vsphere",2,{"product":137,"cves":16},"nexus_1000v_for_microsoft_hyper-v",{"product":139,"cves":16},"nexus_1000v_firmware",{"product":141,"cves":16},"nexus_1000v_switch",{"product":143,"cves":16},"nexus_1000v_switch_for_microsoft_hyper-v",{"product":145,"cves":16},"nexus_1000v_switch_for_vmware_vsphere",{"product":147,"cves":16},"nexus_1000v_intercloud_firmware"]