Cisco Nexus 93180yc-FX3 Firmware vulnerabilities

4 CVEs affecting Cisco Nexus 93180yc-FX3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20012, published 2023-02-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-20823, published 2022-08-25. High severity, CVSS 8.6. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2021-27853, published 2022-09-27. Medium severity, CVSS 4.7. EPSS: 0.8% chance of exploitation in the next 30 days. Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.
CVE-2022-20824, published 2022-08-25. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root…
CVE-2023-20012, published 2023-02-23. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the CLI console login authentication of Cisco Nexus 9300-FX3 Series Fabric Extender (FEX) when used in UCS Fabric Interconnect deployments could allow an unauthenticated attacker…