CVE-2020-3394— Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability
Quick assessment
Affected
Cisco Cisco NX-OS Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Nexus 3000 Series Switches和Cisco Nexus 9000 Series Switches都是美国思科（Cisco）公司的产品。Cisco Nexus 3000 Series Switches是一款3000系列交换机。Cisco Nexus 9000 Series Switches是一款9000系列交换机。Cisco NX-OS Software是一套交换机使用的数据中心级操作系统软件。 Cisco Nexus 3000系列交换机和Cisco Nexus 9000系
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-3394
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the attacker would need to have valid credentials for the affected device. The vulnerability is due to a logic error in the implementation of the enable command. An attacker could exploit this vulnerability by logging in to the device and issuing the enable command. A successful exploit could allow the attacker to gain full administrative privileges without using the enable password. Note: The Enable Secret feature is disabled by default.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Nexus 3000 Series Switches和Cisco Nexus 9000 Series Switches 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Nexus 3000 Series Switches和Cisco Nexus 9000 Series Switches都是美国思科（Cisco）公司的产品。Cisco Nexus 3000 Series Switches是一款3000系列交换机。Cisco Nexus 9000 Series Switches是一款9000系列交换机。Cisco NX-OS Software是一套交换机使用的数据中心级操作系统软件。 Cisco Nexus 3000系列交换机和Cisco Nexus 9000系
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS Software | n/a | - |
|
II. Public POCs for CVE-2020-3394
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3394
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-3394 (1)
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3n9k-priv-escal-3QhXJBC vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2020-08-27 · 8 CVEs total
| CVE-2020-3504 | 3.3 LOW | Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability |
| CVE-2020-3517 | Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability | |
| CVE-2020-3338 | Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability | |
| CVE-2020-3397 | Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability | |
| CVE-2020-3398 | Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulne | |
| CVE-2020-3415 | Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability | |
| CVE-2020-3454 | Cisco NX-OS Software Call Home Command Injection Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco NX-OS Software
-
CVE-2026-20212
Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardwa -
CVE-2026-20171
Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Den -
CVE-2026-20010
Cisco Nexus 3000 and 9000 Series Switches Link Layer Discove -
CVE-2026-20051
Cisco Nexus 3600-R and 9500-R Series Switching Platforms Lay -
CVE-2025-20241
Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TB
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
Same weakness: CWE-285
-
CVE-2026-105121
OpenAM before 16.1.3 Improper Authorization in Delegated Ses -
CVE-2026-105119
OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 H -
CVE-2026-103858
MISP Incomplete Thread Authorization Allows Unauthorized Rea -
CVE-2026-103532
immich-app Immich Shared Link Preview access.ts checkSharedL -
CVE-2026-93547
Missing Authorization Check in Vaadin Spreadsheet Allows Cel
V. Comments for CVE-2020-3394
No comments yet