Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit one of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page.
CISA encourages users and administrators to review the following Cisco advisories and apply the necessary updates:
Cisco NX-OS Software NX-API Command Injection Vulnerability cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2
Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability cisco-sa-nxos-bfd-dos-wGQXrzxn
Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability cisco-sa-cfsoip-dos-tpykyDr
A remote, unauthenticated attacker could exploit some of these vulnerabilities to take control of an affected system.
