[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxk0qlOl_vr64XqgadjxGXPnciXE5-7DQ9LkObVTbfm0":3,"g5a-family:cisco\u002Fnexus_9000_in_standalone":75,"g5a-ex:cisco\u002Fnexus_9000_in_standalone@*":79},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":47,"seoMetadata":53,"meta":72},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","nexus_9000_in_standalone",0,6,1,"2024-08-28",[],"Nexus 9000 In Standalone by Cisco is a technology product and 6 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,24,32,38,43,45],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":10,"cvssVersion":21,"severity":22,"isKev":4,"epssScore":23},"CVE-2024-20399","A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode","2024-07-01","v3.1","Medium",0.04306,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":21,"severity":29,"isKev":30,"epssScore":31},"CVE-2021-34714","A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.","2021-09-23",7.4,"High",false,0.00389,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":21,"severity":29,"isKev":30,"epssScore":37},"CVE-2019-1593","A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level by executing commands authorized to other user roles. The attacker must authenticate with valid user credentials. The vulnerability is due to the incorrect implementation of a Bash shell command that allows role-based access control (RBAC) to be bypassed. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Bash prompt. A successful exploit could allow the attacker to escalate their privilege level by executing commands that should be restricted to other roles. For example, a dev-ops user could escalate their privilege level to admin with a successful exploit of this vulnerability.","2019-03-06",7.8,0.00386,{"cveId":39,"description":40,"publishedDate":12,"cvssScore":41,"cvssVersion":21,"severity":22,"isKev":30,"epssScore":42},"CVE-2024-20284","A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device.\r\n\r\nThe vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. \r\nNote: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the  section of the Cisco Nexus 9000 Series NX-OS Programmability Guide.",5.3,0.00194,{"cveId":44,"description":40,"publishedDate":12,"cvssScore":41,"cvssVersion":21,"severity":22,"isKev":30,"epssScore":42},"CVE-2024-20285",{"cveId":46,"description":40,"publishedDate":12,"cvssScore":41,"cvssVersion":21,"severity":22,"isKev":30,"epssScore":42},"CVE-2024-20286",[48],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":10,"severity":22,"isKev":4,"epssScore":23,"cisaVulnName":49,"cisaDateAdded":50,"cisaShortDescription":51,"cisaRequiredAction":52},"Cisco NX-OS Command Injection Vulnerability","2024-07-02","Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":54,"metaDescription":55,"keywords":56,"structuredData":57},"Nexus 9000 In Standalone by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nexus 9000 In Standalone by Cisco with 6 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Nexus 9000 In Standalone vulnerabilities, Nexus 9000 In Standalone security, Nexus 9000 In Standalone CVE, Cisco Nexus 9000 In Standalone, Nexus 9000 In Standalone threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nexus 9000 In Standalone KEV, Nexus 9000 In Standalone exploited vulnerabilities",{"@context":58,"@type":59,"name":60,"description":55,"url":61,"manufacturer":62,"applicationCategory":66,"softwareVersion":67,"mainEntity":68},"https:\u002F\u002Fschema.org","SoftwareApplication","Nexus 9000 In Standalone","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fnexus_9000_in_standalone",{"@type":63,"name":64,"url":65},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":69,"name":70,"description":71,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nexus 9000 In Standalone Security Vulnerabilities","Security vulnerabilities affecting Nexus 9000 In Standalone by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":73,"apiVersion":74},"2026-10-19T00:04:46.203Z","3.0",[76],{"product":77,"cves":78},"nexus_9000_in_standalone_nx-os_mode",7,{"rows":80,"total":11,"capped":30,"failed":9},[81],{"cveId":18,"name":49,"severity":22,"cvss":10,"added":50,"epss":23,"published":82,"ranges":83,"checked":4,"hits":84,"covers":30},"2024-07-01T17:15:04.383",[],[]]