[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1EPeRRKbze_6re88BKDJ2zp28HhRLGAg5G2bp7TA1VA":3,"g5a-family:cisco\u002Fnexus_3200":110,"g5a-ex:cisco\u002Fnexus_3200@*":113},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":78,"seoMetadata":88,"meta":107},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","nexus_3200",0,18,2,"2024-08-28",[],"Nexus 3200 by Cisco is a technology product and 18 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,32,40,46,53,58,63,67,72],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":31},"CVE-2024-20399","A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode","2024-07-01",6,"Medium",0.04306,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":22,"severity":37,"isKev":38,"epssScore":39},"CVE-2021-1361","A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite arbitrary files with root privileges on the device. This vulnerability exists because TCP port 9075 is incorrectly configured to listen and respond to external connection requests. An attacker could exploit this vulnerability by sending crafted TCP packets to an IP address that is configured on a local interface on TCP port 9075. A successful exploit could allow the attacker to create, delete, or overwrite arbitrary files, including sensitive files that are related to the device configuration. For example, the attacker could add a user account without the device administrator knowing.","2021-02-24",9.1,"Critical",false,0.0163,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":22,"severity":23,"isKev":38,"epssScore":45},"CVE-2022-20823","A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.","2022-08-25",8.6,0.011,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":30,"isKev":38,"epssScore":52},"CVE-2019-1733","A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the NX-API Sandbox interface. An attacker could exploit this vulnerability by persuading a user of the NX-API Sandbox interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected NX-API Sandbox interface.","2019-05-15",5.4,"v3.0",0.00885,{"cveId":54,"description":55,"publishedDate":49,"cvssScore":56,"cvssVersion":22,"severity":30,"isKev":38,"epssScore":57},"CVE-2019-1727","A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied parameters that are passed to certain Python functions in the scripting sandbox of the affected device. An attacker could exploit this vulnerability to escape the scripting sandbox and execute arbitrary commands to elevate the attacker's privilege level. To exploit this vulnerability, the attacker must have local access and be authenticated to the targeted device with administrative or Python execution privileges. These requirements could limit the possibility of a successful exploit.",6.7,0.00531,{"cveId":59,"description":60,"publishedDate":49,"cvssScore":61,"cvssVersion":22,"severity":23,"isKev":38,"epssScore":62},"CVE-2019-1726","A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit this vulnerability by including malicious input as the argument to the affected command. A successful exploit could allow the attacker to bypass intended restrictions and access internal services of the device. An attacker would need valid device credentials to exploit this vulnerability.",7.8,0.00407,{"cveId":64,"description":65,"publishedDate":49,"cvssScore":56,"cvssVersion":22,"severity":30,"isKev":38,"epssScore":66},"CVE-2019-1730","A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell. The attacker must authenticate with valid administrator device credentials. The vulnerability is due to the incorrect implementation of a CLI command that allows a Bash command to be incorrectly invoked on the Guest Shell CLI. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Guest Shell prompt. A successful exploit could allow the attacker to issue commands that should be restricted by a Guest Shell account.",0.00402,{"cveId":68,"description":69,"publishedDate":43,"cvssScore":70,"cvssVersion":22,"severity":23,"isKev":38,"epssScore":71},"CVE-2022-20824","A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation of specific values that are within a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges or cause the Cisco Discovery Protocol process to crash and restart multiple times, which would cause the affected device to reload, resulting in a DoS condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).",8.8,0.00396,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":22,"severity":23,"isKev":38,"epssScore":77},"CVE-2021-34714","A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.","2021-09-23",7.4,0.00389,[79,84],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":30,"isKev":4,"epssScore":31,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":83},"Cisco NX-OS Command Injection Vulnerability","2024-07-02","Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":85,"cisaDateAdded":20,"cisaShortDescription":86,"cisaRequiredAction":87},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":89,"metaDescription":90,"keywords":91,"structuredData":92},"Nexus 3200 by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nexus 3200 by Cisco with 18 tracked vulnerabilities including 0 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nexus 3200 vulnerabilities, Nexus 3200 security, Nexus 3200 CVE, Cisco Nexus 3200, Nexus 3200 threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nexus 3200 KEV, Nexus 3200 exploited vulnerabilities",{"@context":93,"@type":94,"name":95,"description":90,"url":96,"manufacturer":97,"applicationCategory":101,"softwareVersion":102,"mainEntity":103},"https:\u002F\u002Fschema.org","SoftwareApplication","Nexus 3200","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fnexus_3200",{"@type":98,"name":99,"url":100},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":104,"name":105,"description":106,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nexus 3200 Security Vulnerabilities","Security vulnerabilities affecting Nexus 3200 by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":108,"apiVersion":109},"2026-10-18T23:48:19.151Z","3.0",[111],{"product":112,"cves":11},"nexus_3200_firmware",{"rows":114,"total":11,"capped":38,"failed":9},[115,119],{"cveId":26,"name":80,"severity":30,"cvss":29,"added":81,"epss":31,"published":116,"ranges":117,"checked":4,"hits":118,"covers":38},"2024-07-01T17:15:04.383",[],[],{"cveId":18,"name":85,"severity":23,"cvss":21,"added":20,"epss":24,"published":120,"ranges":121,"checked":4,"hits":122,"covers":38},"2023-10-10T14:15:10.883",[],[]]