[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwkOdKvueK6ZGtitMjYOp8z1ziUMdF8-gora_69jXDbA":3,"g5a-family:cisco\u002Fnexus_9000_in_aci_mode":81,"g5a-ex:cisco\u002Fnexus_9000_in_aci_mode@*":82},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":53,"seoMetadata":59,"meta":78},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","nexus_9000_in_aci_mode",0,7,1,"2024-08-28",[],"Nexus 9000 In Aci Mode by Cisco is a technology product and 7 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,39,44,49,51],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2024-20399","A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode","2024-07-01",6,"v3.1","Medium",0.04306,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2021-34714","A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.","2021-09-23",7.4,"High",false,0.00389,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":38},"CVE-2019-1593","A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level by executing commands authorized to other user roles. The attacker must authenticate with valid user credentials. The vulnerability is due to the incorrect implementation of a Bash shell command that allows role-based access control (RBAC) to be bypassed. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Bash prompt. A successful exploit could allow the attacker to escalate their privilege level by executing commands that should be restricted to other roles. For example, a dev-ops user could escalate their privilege level to admin with a successful exploit of this vulnerability.","2019-03-06",7.8,0.00386,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":43},"CVE-2023-20185","A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic.\r\n\r This vulnerability is due to an issue with the implementation of the ciphers that are used by the CloudSec encryption feature on affected switches. An attacker with an on-path position between the ACI sites could exploit this vulnerability by intercepting intersite encrypted traffic and using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to read or modify the traffic that is transmitted between the sites.\r\n\r Cisco has not released and will not release software updates that address this vulnerability.","2023-07-12",0.00343,{"cveId":45,"description":46,"publishedDate":12,"cvssScore":47,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":48},"CVE-2024-20284","A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device.\r\n\r\nThe vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. \r\nNote: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the  section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.",5.3,0.00194,{"cveId":50,"description":46,"publishedDate":12,"cvssScore":47,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":48},"CVE-2024-20285",{"cveId":52,"description":46,"publishedDate":12,"cvssScore":47,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":48},"CVE-2024-20286",[54],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":55,"cisaDateAdded":56,"cisaShortDescription":57,"cisaRequiredAction":58},"Cisco NX-OS Command Injection Vulnerability","2024-07-02","Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":60,"metaDescription":61,"keywords":62,"structuredData":63},"Nexus 9000 In Aci Mode by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nexus 9000 In Aci Mode by Cisco with 7 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Nexus 9000 In Aci Mode vulnerabilities, Nexus 9000 In Aci Mode security, Nexus 9000 In Aci Mode CVE, Cisco Nexus 9000 In Aci Mode, Nexus 9000 In Aci Mode threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nexus 9000 In Aci Mode KEV, Nexus 9000 In Aci Mode exploited vulnerabilities",{"@context":64,"@type":65,"name":66,"description":61,"url":67,"manufacturer":68,"applicationCategory":72,"softwareVersion":73,"mainEntity":74},"https:\u002F\u002Fschema.org","SoftwareApplication","Nexus 9000 In Aci Mode","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fnexus_9000_in_aci_mode",{"@type":69,"name":70,"url":71},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":75,"name":76,"description":77,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nexus 9000 In Aci Mode Security Vulnerabilities","Security vulnerabilities affecting Nexus 9000 In Aci Mode by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":79,"apiVersion":80},"2026-10-19T00:10:38.298Z","3.0",[],{"rows":83,"total":11,"capped":31,"failed":9},[84],{"cveId":18,"name":55,"severity":23,"cvss":21,"added":56,"epss":24,"published":85,"ranges":86,"checked":4,"hits":87,"covers":31},"2024-07-01T17:15:04.383",[],[]]