🔍 Cisco flags five critical NX-OS flaws on Nexus switches

Cisco has issued advisories for five critical vulnerabilities in NX-OS affecting Nexus 3000 and 9000 switches in standalone mode. The flaws impact NX-API, NGOAM, and MPLS OAM and can allow arbitrary code execution with root privileges or force device reloads. Exploitation depends on the affected features being enabled; Nexus 7000 and Nexus 9000 systems in ACI mode are not affected. Cisco recommends patching and disabling unused services in its NX-OS advisories.

Operationally, this is a control-plane risk for data center switching fabric rather than a generic edge-device issue. Feature exposure matters: NX-API and MPLS OAM are off by default, while NGOAM-linked attack paths depend on specific network services being active.

🛰️ Open sources - closed narratives
@sitreports