DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Nexus, Dashboard, NX-OS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-08-27
Ein Angreifer kann mehrere Schwachstellen in Cisco Nexus, Cisco NX-OS, Cisco Unified Computing System (UCS) und Cisco Nexus Dashboard ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Root-Rechte zu erlangen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.
01
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-20348US | medium5.0 | — | ||
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker… | ||||
| CVE-2025-20347US | — | — | ||
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker… | ||||
| CVE-2025-20344US | high7.2 | — | ||
A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.… | ||||
| CVE-2025-20292US | — | — | ||
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affec… | ||||
| CVE-2025-20290US | — | — | ||
A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabri… | ||||
| CVE-2025-20262US | — | — | ||
A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode cou… | ||||
| CVE-2025-20241US | — | — | ||
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory cisco-sa-n39k-isis-dos-JhJA8Rfx vom 2025-08-27external
- Cisco Security Advisory cisco-sa-nd-ptrs-XU2Fm2Wb vom 2025-08-27external
- Cisco Security Advisory cisco-sa-nshs-urapi-gJuBVFpu vom 2025-08-27external
- Cisco Security Advisory cisco-sa-nxos-cmdinj-qhNze5Ss vom 2025-08-27external
- Cisco Security Advisory cisco-sa-nxos-infodis-TEcTYSFG vom 2025-08-27external
- Cisco Security Advisory cisco-sa-nxospc-pim6-vG4jFPh vom 2025-08-27external
- WID-SEC-W-2025-1915 - CSAF Versionself
- WID-SEC-2025-1915 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan