[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwSGO_T-qQyzblwCF2lrp-M49sDxEcXkGeHhVVM8WiTs":3,"g5a-family:cisco\u002Fnexus_93180yc-fx3s":103,"g5a-ex:cisco\u002Fnexus_93180yc-fx3s@*":107},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":71,"seoMetadata":81,"meta":100},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","nexus_93180yc-fx3s",0,27,2,"2024-08-28",[],"Nexus 93180yc-fx3s by Cisco is a technology product and 27 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,32,39,43,50,54,59,63,67],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":31},"CVE-2024-20399","A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode","2024-07-01",6,"Medium",0.04306,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":37,"epssScore":38},"CVE-2021-1586","A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to unexpectedly restart the device, resulting in a denial of service (DoS) condition. This vulnerability exists because TCP traffic sent to a specific port on an affected device is not properly sanitized. An attacker could exploit this vulnerability by sending crafted TCP data to a specific port that is listening on a public-facing IP address for the Multi-Pod or Multi-Site configuration. A successful exploit could allow the attacker to cause the device to restart unexpectedly, resulting in a DoS condition.","2021-08-25",8.6,false,0.02453,{"cveId":40,"description":41,"publishedDate":35,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":37,"epssScore":42},"CVE-2021-1587","A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific packets with a Transparent Interconnection of Lots of Links (TRILL) OAM EtherType. An attacker could exploit this vulnerability by sending crafted packets, including the TRILL OAM EtherType of 0x8902, to a device that is part of a VXLAN Ethernet VPN (EVPN) fabric. A successful exploit could allow the attacker to cause an affected device to experience high CPU usage and consume excessive system resources, which may result in overall control plane instability and cause the affected device to reload. Note: The NGOAM feature is disabled by default.",0.01681,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":22,"severity":48,"isKev":37,"epssScore":49},"CVE-2021-1361","A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite arbitrary files with root privileges on the device. This vulnerability exists because TCP port 9075 is incorrectly configured to listen and respond to external connection requests. An attacker could exploit this vulnerability by sending crafted TCP packets to an IP address that is configured on a local interface on TCP port 9075. A successful exploit could allow the attacker to create, delete, or overwrite arbitrary files, including sensitive files that are related to the device configuration. For example, the attacker could add a user account without the device administrator knowing.","2021-02-24",9.1,"Critical",0.0163,{"cveId":51,"description":52,"publishedDate":46,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":37,"epssScore":53},"CVE-2021-1230","A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer.",0.01528,{"cveId":55,"description":56,"publishedDate":46,"cvssScore":57,"cvssVersion":22,"severity":30,"isKev":37,"epssScore":58},"CVE-2021-1229","A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory leak, which over time could lead to a denial of service (DoS) condition. This vulnerability is due to improper error handling when an IPv6-configured interface receives a specific type of ICMPv6 packet. An attacker could exploit this vulnerability by sending a sustained rate of crafted ICMPv6 packets to a local IPv6 address on a targeted device. A successful exploit could allow the attacker to cause a system memory leak in the ICMPv6 process on the device. As a result, the ICMPv6 process could run out of system memory and stop processing traffic. The device could then drop all ICMPv6 packets, causing traffic instability on the device. Restoring device functionality would require a device reboot.",5.3,0.01425,{"cveId":60,"description":61,"publishedDate":46,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":37,"epssScore":62},"CVE-2021-1387","A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because the software improperly releases resources when it processes certain IPv6 packets that are destined to an affected device. An attacker could exploit this vulnerability by sending multiple crafted IPv6 packets to an affected device. A successful exploit could cause the network stack to run out of available buffers, impairing operations of control plane and management plane protocols and resulting in a DoS condition. Manual intervention would be required to restore normal operations on the affected device. For more information about the impact of this vulnerability, see the Details section of this advisory.",0.01417,{"cveId":64,"description":65,"publishedDate":35,"cvssScore":57,"cvssVersion":22,"severity":30,"isKev":37,"epssScore":66},"CVE-2021-1590","A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of service (DoS) condition. This vulnerability is due to a logic error in the implementation of the system login block-for command when an attack is detected and acted upon. An attacker could exploit this vulnerability by performing a brute-force login attack on an affected device. A successful exploit could allow the attacker to cause a login process to reload, which could result in a delay during authentication to the affected device.",0.01355,{"cveId":68,"description":69,"publishedDate":35,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":37,"epssScore":70},"CVE-2021-1588","A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation when an affected device is processing an MPLS echo-request or echo-reply packet. An attacker could exploit this vulnerability by sending malicious MPLS echo-request or echo-reply packets to an interface that is enabled for MPLS forwarding on the affected device. A successful exploit could allow the attacker to cause the MPLS OAM process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition.",0.01316,[72,77],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":30,"isKev":4,"epssScore":31,"cisaVulnName":73,"cisaDateAdded":74,"cisaShortDescription":75,"cisaRequiredAction":76},"Cisco NX-OS Command Injection Vulnerability","2024-07-02","Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":78,"cisaDateAdded":20,"cisaShortDescription":79,"cisaRequiredAction":80},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Nexus 93180yc-fx3s by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nexus 93180yc-fx3s by Cisco with 27 tracked vulnerabilities including 0 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nexus 93180yc-fx3s vulnerabilities, Nexus 93180yc-fx3s security, Nexus 93180yc-fx3s CVE, Cisco Nexus 93180yc-fx3s, Nexus 93180yc-fx3s threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nexus 93180yc-fx3s KEV, Nexus 93180yc-fx3s exploited vulnerabilities",{"@context":86,"@type":87,"name":88,"description":83,"url":89,"manufacturer":90,"applicationCategory":94,"softwareVersion":95,"mainEntity":96},"https:\u002F\u002Fschema.org","SoftwareApplication","Nexus 93180yc-fx3s","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fnexus_93180yc-fx3s",{"@type":91,"name":92,"url":93},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":97,"name":98,"description":99,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nexus 93180yc-fx3s Security Vulnerabilities","Security vulnerabilities affecting Nexus 93180yc-fx3s by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":101,"apiVersion":102},"2026-10-19T01:36:23.093Z","3.0",[104],{"product":105,"cves":106},"nexus_93180yc-fx3s_firmware",3,{"rows":108,"total":11,"capped":37,"failed":9},[109,113],{"cveId":26,"name":73,"severity":30,"cvss":29,"added":74,"epss":31,"published":110,"ranges":111,"checked":4,"hits":112,"covers":37},"2024-07-01T17:15:04.383",[],[],{"cveId":18,"name":78,"severity":23,"cvss":21,"added":20,"epss":24,"published":114,"ranges":115,"checked":4,"hits":116,"covers":37},"2023-10-10T14:15:10.883",[],[]]