Cisco Systems Inc. NX-OS

Name: Cisco Systems Inc. NX-OS
Brand: Cisco Systems Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical81high82medium1low

updated 2026-10-28

vulnerabilities (179)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20399US	medium6.7OT critical	4.31% (91st)	KEV	no fix	2024-07-01	316 versions
CVE-2020-10136US	medium5.3	28.5% (98th)	Exploit	no fix	2020-06-02	9 versions
CVE-2022-20650US	high8.8	14.5% (97th)	—	no fix	2022-02-23	3 versions
CVE-2019-1599US	high8.6	14.3% (97th)	—	no fix	2019-03-07	16 versions
CVE-2022-20624US	high7.5	12.4% (96th)	—	no fix	2022-02-23	2 versions
CVE-2022-20623US	high7.5	11.9% (96th)	—	no fix	2022-02-23	5 versions
CVE-2020-3119US	high8.8	4.78% (92nd)	—	no fix	2020-02-05	5 versions
CVE-2018-0310US	critical9.8	4.10% (91st)	—	no fix	2018-06-21	11 versions
CVE-2019-1614US	high8.8	4.07% (91st)	—	no fix	2019-03-11	8 versions
CVE-2018-0378US	high8.6	4.01% (91st)	—	no fix	2018-10-17	5 versions
CVE-2015-0718US	high7.5	3.94% (90th)	—	no fix	2016-03-03	4.0 → 6.1
CVE-2016-1409US	high7.5	3.90% (90th)	—	no fix	2016-05-29	—
CVE-2016-1329US	critical9.8	3.74% (90th)	—	no fix	2016-03-03	3 versions
CVE-2016-1351US	high7.5	3.72% (90th)	—	no fix	2016-03-26	≤ 4.1 до 6.2
CVE-2019-1804US	critical9.8OT elevated	3.45% (89th)	—	no fix	2019-05-03	≤ 14.1(1i)
CVE-2022-20625US	medium4.3	3.26% (88th)	—	no fix	2022-02-23	3 versions
CVE-2018-0456US	high7.7	3.17% (88th)	—	no fix	2018-10-17	5 versions
CVE-2025-20292US	—	3.17% (88th)	—	no fix	2025-08-27	114 versions
CVE-2015-0775US	medium5.0	2.97% (87th)	—	no fix	2015-06-12	7 versions
CVE-2017-3879US	medium5.3	2.95% (87th)	—	no fix	2017-03-17	3 versions
CVE-2017-3878US	medium5.3	2.95% (87th)	—	no fix	2017-03-17	≤ 7.0(3)i3(0.170)
CVE-2018-0311US	high7.5	2.79% (86th)	—	no fix	2018-06-21	18 versions
CVE-2015-4213US	medium4.0	2.61% (85th)	—	no fix	2015-06-24	≤ 1.1(1g)
CVE-2020-3454US	high7.2	2.58% (85th)	—	no fix	2020-08-27	12 versions
CVE-2019-1598US	high7.5	2.54% (85th)	—	no fix	2019-03-07	18 versions
CVE-2019-1597US	high7.5	2.54% (85th)	—	no fix	2019-03-07	18 versions
CVE-2019-1616US	high7.5	2.44% (84th)	—	no fix	2019-03-11	16 versions
CVE-2019-1858US	high8.6	2.39% (84th)	—	no fix	2019-05-16	13 versions
CVE-2015-6260US	high7.5	2.35% (84th)	—	no fix	2016-03-03	≤ 7.1(1)N1(1)
CVE-2015-4235US	high9.0	2.25% (83rd)	—	no fix	2015-07-24	4 versions
CVE-2017-3875US	medium5.3	2.24% (83rd)	—	no fix	2017-03-17	7 versions
CVE-2016-1302US	high8.8	2.18% (82nd)	—	no fix	2016-02-07	2 versions
CVE-2015-4225US	medium4.0	2.01% (81st)	—	no fix	2015-06-27	2 versions
CVE-2018-0291US	medium6.5	2.01% (81st)	—	no fix	2018-06-20	19 versions
CVE-2019-1967US	high7.5	1.99% (80th)	—	no fix	2019-08-30	21 versions
CVE-2019-1964US	high7.5	1.99% (80th)	—	no fix	2019-08-28	2 versions
CVE-2019-1962US	high7.5	1.98% (80th)	—	no fix	2019-08-28	17 versions
CVE-2018-0298US	high7.5	1.98% (80th)	—	no fix	2018-06-21	2 versions
CVE-2020-3175US	high8.6	1.97% (80th)	—	no fix	2020-02-26	≤ 6.2(1)
CVE-2015-6398US	high7.5	1.93% (80th)	—	no fix	2016-02-07	≤ 11.0(1c)
CVE-2020-3172US	high8.8	1.89% (79th)	—	no fix	2020-02-26	5 versions
CVE-2020-3228US	high8.6	1.85% (79th)	—	no fix	2020-06-03	5.2(1)SV3 → 5.2(1)SV14
CVE-2020-3398US	high8.6	1.82% (79th)	—	no fix	2020-08-27	2 versions
CVE-2015-4296US	medium5.0	1.81% (79th)	—	no fix	2015-08-19	≤ 6.0(2)a6(1)
CVE-2020-3397US	high8.6	1.81% (79th)	—	no fix	2020-08-27	5 versions
CVE-2020-3338US	high7.5	1.78% (78th)	—	no fix	2020-08-27	17 versions
CVE-2019-1968US	high7.5	1.77% (78th)	—	no fix	2019-08-30	19 versions
CVE-2015-4301US	medium6.8	1.76% (78th)	—	no fix	2015-08-19	≤ 11.1(1c)
CVE-2020-3170US	medium5.3	1.74% (78th)	—	no fix	2020-02-26	3 versions
CVE-2021-1587US	high8.6	1.68% (77th)	—	no fix	2021-08-25	≤ 9.3.7a

showing 50 of 179

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation54 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')23 CVEs
CWE-264CWE-26420 CVEs
CWE-399CWE-39914 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer13 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')13 CVEs
CWE-347Improper Verification of Cryptographic Signature11 CVEs
CWE-284Improper Access Control10 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)178 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan