cisco-sa-n9k-s1-rce-EH8dEtr

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

Cisco has released software updates that address this vulnerability.

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].

There is a workaround that addresses this vulnerability. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211. For more information about iACLs, see the Cisco NX-OS Software Hardening Guide ["https://sec.cloudapps.cisco.com/security/center/resources/securing_nx_os.html"]. While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment. Live Protect Shields Cisco has released a Live Protect shield for CVE-2026-20212 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability in Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"].