Skip to content
OpenAdvisories
Medium WID-SEC-2025-1915 7 CVEs

Cisco Nexus, Dashboard, NX-OS: Mehrere Schwachstellen

Published Aug 27, 2025 · Updated Aug 27, 2025 · de-DE

Vendor: Cisco Product: Nexus Product: Nexus Dashboard Product: NX-OS Product: Unified Computing System (UCS)

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Nexus, Cisco NX-OS, Cisco Unified Computing System (UCS) und Cisco Nexus Dashboard ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Root-Rechte zu erlangen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.

Product

Bei der Cisco Nexus Serie handelt es sich um modulare Switching-Systeme der Data Center-Klasse.
Cisco NX-OS ist ein Data Center Netzwerk-Betriebssystem für virtualisierte Rechenzentren. NX-OS wurde für Ethernet Switches der Nexus Serie und Fibre Channel Storage Area Network Swiches der MDS Serie entwickelt.
Bei dem Cisco Unified Computing System (UCS) handelt es sich um eine Rechenzentrumsplattform, die Rechenleistung, Netzwerk, Storage-Zugriff und Virtualisierung in einem System zusammenführt.
Cisco Nexus Dashboard ist ein Dashboard für Rechenzentren zur Verwaltung von Hybrid-Cloud-Netzwerken.

Vulnerabilities 7

  • High 7.4
    CVE-2025-20241

    Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service Vulnerability

    A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to c…

    Cisco Cisco NX-OS Software Network devices
  • Medium 6.5
    CVE-2025-20344

    Cisco Nexus Dashboard Path Traversal Vulnerability

    A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. This vulnerability is due to insufficient validation of the contents of a back…

    Cisco Cisco Nexus Dashboard Network devices
  • Medium 5.5
    CVE-2025-20290

    Cisco NXOS Software Sensitive Log Information Disclosure Vulnerability

    A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, and Cisco UCS 9108…

    Cisco Cisco NX-OS Software Cisco Unified Computing System (Managed) Network devices
  • Medium 5.4
    CVE-2025-20347

    Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability

    A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device.…

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 5.0
    CVE-2025-20262

    Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability

    A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash o…

    Cisco Cisco NX-OS Software Network devices
  • Medium 5.0
    CVE-2025-20348

    Cisco Nexus Dashboard Unauthorized REST API Vulnerability

    A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device.…

    Cisco Cisco Nexus Dashboard Network devices
  • Medium 4.4
    CVE-2025-20292

    Cisco NXOS Software Command Injection Vulnerability

    A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user cr…

    Cisco Cisco NX-OS Software Cisco Unified Computing System (Managed) Cisco NX-OS System Software in ACI Mode Network devices

Revision history

  1. #1

    Initiale Fassung

References