Skip to content
fr Sign in
9.8 Critical

CVE-2026-20212 A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated,…

Description

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.

Affected products and versions

Product Affected versions Fixed in
Cisco NX-OS Software Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco NX-OS Software

The 102 CVEs of Cisco NX-OS Software →
CVE-2026-76501 A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of… 9.8 Critical CVE-2026-76486 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known… 9.8 Critical CVE-2026-76485 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known… 9.8 Critical CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 8.6 High
Track this CVE