9.8

CVE-2026-20212

Medienbericht

Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges.

This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt Cisco NX-OS Software
Default Statusunknown
Version 10.3(1)
Status affected
Version 10.3(2)
Status affected
Version 10.3(3)
Status affected
Version 10.4(1)
Status affected
Version 10.3(99w)
Status affected
Version 10.3(3w)
Status affected
Version 10.3(99x)
Status affected
Version 10.3(3o)
Status affected
Version 10.3(4)
Status affected
Version 10.3(3p)
Status affected
Version 10.3(4a)
Status affected
Version 10.4(2)
Status affected
Version 10.3(3q)
Status affected
Version 10.3(5)
Status affected
Version 10.4(3)
Status affected
Version 10.3(3x)
Status affected
Version 10.3(4g)
Status affected
Version 10.5(1)
Status affected
Version 10.3(3r)
Status affected
Version 10.3(6)
Status affected
Version 10.4(4)
Status affected
Version 10.3(4h)
Status affected
Version 10.5(2)
Status affected
Version 10.3(7)
Status affected
Version 10.4(5)
Status affected
Version 10.5(3)
Status affected
Version 10.4(4g)
Status affected
Version 10.5(4)
Status affected
Version 10.6(1)
Status affected
Version 10.5(3t)
Status affected
Version 10.3(8)
Status affected
Version 10.4(6)
Status affected
Version 10.5(3s)
Status affected
Version 10.5(3e)
Status affected
Version 10.5(3o)
Status affected
Version 10.6(1s)
Status affected
Version 10.6(2)
Status affected
Version 10.5(3p)
Status affected
Version 10.3(9)
Status affected
Version 10.6(2s)
Status affected
Version 10.6(3)
Status affected
Version 10.4(7)
Status affected
Version 10.5(5)
Status affected
Version 10.6(2n)
Status affected
Version 10.6(3s)
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.427
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-1327 Binding to an Unrestricted IP Address

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.09.2026 17:01
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
07.09.2026 18:21
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
04.09.2026 11:52
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
03.09.2026 18:52
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr