Cisco Cisco NX-OS Software

Name: Cisco Cisco NX-OS Software
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical43high56medium3low

updated 2026-10-26

vulnerabilities (122)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2024-20399US	medium6.7OT critical	4.31% (91st)	KEV	no fix	2024-07-01	318 versions
CVE-2020-25686US	low3.7OT elevated	5.47% (93rd)	Exploit	no fix	2021-01-20	—
CVE-2026-20212US	critical9.8	0.83% (57th)	Exploit	no fix	2026-09-02	≤ vers:unknown/*
CVE-2020-25687US	medium5.9	89.3% (100th)	—	no fix	2021-01-20	—
CVE-2020-25683US	medium5.9	88.7% (100th)	—	no fix	2021-01-20	—
CVE-2020-25681US	high8.1	84.1% (100th)	—	no fix	2021-01-20	—
CVE-2020-25682US	high8.1	75.1% (100th)	—	no fix	2021-01-20	—
CVE-2022-20650US	high8.8	14.5% (97th)	—	no fix	2022-02-23	≤ n/a
CVE-2022-20624US	high7.5	12.4% (96th)	—	no fix	2022-02-23	≤ n/a
CVE-2022-20623US	high7.5	11.9% (96th)	—	no fix	2022-02-23	≤ n/a
CVE-2020-25684US	low3.7	4.16% (91st)	—	no fix	2021-01-20	—
CVE-2022-20625US	medium4.3	3.26% (88th)	—	no fix	2022-02-23	≤ n/a
CVE-2025-20292US	—	3.17% (88th)	—	no fix	2025-08-27	223 versions
CVE-2018-0090US	high7.5	2.65% (85th)	—	no fix	2018-01-18	—
CVE-2020-25685US	low3.7	2.23% (83rd)	—	no fix	2021-01-20	—
CVE-2018-0309US	high7.7	2.02% (81st)	—	no fix	2018-06-21	—
CVE-2019-1967US	high7.5	1.99% (80th)	—	8.3(2)	2019-08-30	unspecified → 8.3(2)
CVE-2020-3228US	high8.6	1.85% (79th)	—	no fix	2020-06-03	—
CVE-2020-3398US	high8.6	1.82% (79th)	—	no fix	2020-08-27	≤ n/a
CVE-2020-3397US	high8.6	1.81% (78th)	—	no fix	2020-08-27	≤ n/a
CVE-2021-1587US	high8.6	1.68% (77th)	—	no fix	2021-08-25	≤ n/a
CVE-2021-1361US	critical9.1	1.63% (76th)	—	no fix	2021-02-24	≤ n/a
CVE-2020-3168US	high7.5	1.60% (76th)	—	n/a	2020-02-26	2 versions
CVE-2020-3165US	high8.2OT elevated	1.56% (75th)	—	no fix	2020-02-26	≤ 9.2(1)
CVE-2019-1965US	high7.7	1.53% (75th)	—	8.4(1)	2019-08-28	unspecified → 8.4(1)
CVE-2021-1229US	medium5.3	1.43% (73rd)	—	no fix	2021-02-24	≤ n/a
CVE-2021-1387US	high8.6	1.42% (73rd)	—	no fix	2021-02-24	≤ n/a
CVE-2020-3517US	high8.6	1.38% (72nd)	—	no fix	2020-08-27	≤ n/a
CVE-2019-1969US	medium5.3	1.38% (72nd)	—	9.2(3)	2019-08-30	unspecified → 9.2(3)
CVE-2021-1590US	medium5.3	1.35% (71st)	—	no fix	2021-08-25	≤ n/a
CVE-2021-1588US	high8.6	1.32% (71st)	—	no fix	2021-08-25	≤ n/a
CVE-2022-20823US	high8.6	1.12% (66th)	—	no fix	2022-08-25	≤ n/a
CVE-2017-12329US	medium6.3	1.10% (65th)	—	no fix	2017-11-30	—
CVE-2017-12330US	medium6.3	1.10% (65th)	—	no fix	2017-11-30	—
CVE-2021-1591US	medium5.3	1.00% (63rd)	—	no fix	2021-08-25	≤ n/a
CVE-2019-1768US	medium6.7	0.96% (61st)	—	8.3(1)	2019-05-16	unspecified → 8.3(1)
CVE-2019-1767US	medium6.7	0.96% (61st)	—	8.3(1)	2019-05-15	unspecified → 8.3(1)
CVE-2024-20267US	high8.6	0.93% (60th)	—	no fix	2024-02-29	205 versions
CVE-2024-20291US	medium5.8OT elevated	0.89% (59th)	—	no fix	2024-02-29	3 versions
CVE-2019-1733US	medium5.4	0.89% (59th)	—	8.3(1)	2019-05-15	unspecified → 8.3(1)
CVE-2020-3415US	high8.8	0.81% (57th)	—	no fix	2020-08-27	≤ n/a
CVE-2021-27853US	medium4.7	0.81% (57th)	—	no fix	2022-09-27	—
CVE-2018-0395US	medium5.3	0.79% (56th)	—	6.2(1)	2018-10-17	unspecified → 6.2(1)
CVE-2024-20446US	—	0.78% (56th)	—	no fix	2024-08-28	4 versions
CVE-2024-20321US	high8.6	0.71% (53rd)	—	no fix	2024-02-29	48 versions
CVE-2021-1227US	high8.1	0.69% (53rd)	—	no fix	2021-02-24	≤ n/a
CVE-2021-27861US	medium4.7	0.66% (51st)	—	no fix	2022-09-27	—
CVE-2019-1595US	medium6.5	0.65% (51st)	—	no fix	2019-03-06	≤ 7.3(5)N1(1)
CVE-2025-20344US	high7.2	0.59% (48th)	—	no fix	2025-08-27	≤ vers:unknown/*

showing 50 of 122

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation23 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')17 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')12 CVEs
CWE-347Improper Verification of Cryptographic Signature10 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')10 CVEs
CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-264CWE-2645 CVEs
CWE-290Authentication Bypass by Spoofing5 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)88 CVEs
USCisco PSIRT (CSAF)23 CVEs
NLNCSC-NL (CSAF)17 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan