Cisco discloses five critical NX-OS flaws affecting Nexus 3000/9000 switches
Cisco issued advisories for five critical vulnerabilities in NX-OS that could let attackers run code with root privileges or crash devices, triggering a denial-of-service. The flaws stem from input validation failures in the NX-API, Next Generation OAM, and MPLS OAM features, and affect Nexus 3000 and 9000 Series switches running in standalone NX-OS mode. Exploitation requires at least one of those features to be active, with some issues also depending on settings like SRv6 or NV Overlay being enabled.