cisco-sa-aci-lldp-dos-ySCNZOpX
Cisco PSIRTHIGH2023-02-22
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability
CVEs:CVE-2023-20089
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability
CVEs:CVE-2023-20089
Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability
CVEs:CVE-2023-20011
Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability
CVEs:CVE-2023-20012
Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability
CVEs:CVE-2023-20015
Cisco NX-OS Software CLI Command Injection Vulnerability
CVEs:CVE-2023-20050
Cisco NX-OS Software SSH X.509v3 Certificate Authentication with Unsupported Remote Authorization Method Privilege Escalation Issues
Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability
CVEs:CVE-2023-20016
ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products: February 2023
CVEs:CVE-2023-20032
ClamAV DMG File Parsing XML Entity Expansion Vulnerability Affecting Cisco Products: February 2023
CVEs:CVE-2023-20052
Cisco Email Security Appliance and Cisco Secure Email and Web Manager Vulnerabilities
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability
CVEs:CVE-2023-20085
Cisco Nexus Dashboard Denial of Service Vulnerability
CVEs:CVE-2023-20014
Cisco Nexus Dashboard Cross-Site Scripting Vulnerability
CVEs:CVE-2023-20053
Cisco Prime Infrastructure Reflected Cross-Site Scripting Vulnerability
CVEs:CVE-2023-20068
Cisco IOx Application Hosting Environment Command Injection Vulnerability
CVEs:CVE-2023-20076
Cisco Identity Services Engine Privilege Escalation Vulnerabilities
Cisco Identity Services Engine XML External Entity Injection Vulnerability
CVEs:CVE-2023-20030
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability
CVEs:CVE-2023-20073
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.