Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-20212— Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

Quick assessment

Affected
Cisco Cisco NX-OS Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

以下是对该漏洞描述的中文翻译，保持了技术术语的准确性与专业性： Cisco Nexus 9000 系列交换机中 Silicon One 集成组件存在一个漏洞，未认证的远程攻击者可借此执行具有 root 权限的代码。 该漏洞产生的原因是，在默认的三层（L3）虚拟路由和转发（VRF）中，TCP 端口 43210 和 43211 处于可访问状态。成功利用该漏洞后，攻击者可以连接到受影响的设备，并发送特制的输入数据，这些数据将以 root 权限作为代码执行。利用该漏洞还可能导致 S1HAL 进程崩溃，进而引发设备重新加载（

CVSS 9.8 · Critical

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 45

VendorProduct Version RangeStatus
Cisco Cisco NX-OS Software 10.3(1) affected
10.3(2) affected
10.3(3) affected
10.4(1) affected
10.3(99w) affected
10.3(3w) affected
10.3(99x) affected
10.3(3o) affected
… +37 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-20212

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1327
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco NX-OS Software 10.3(1) -

II. Public POCs for CVE-2026-20212

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-20212

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-20212 (1)

Same Patch Batch · Cisco · 2026-09-02 · 11 CVEs total

CVE-2026-20279 9.8 CRITICAL Cisco IOS XR Software Security Hardening Release: September 2026
CVE-2026-20274 9.8 CRITICAL Cisco IOS XR Software Security Hardening Release: September 2026
CVE-2026-20280 8.8 HIGH Cisco IOS XR Software Security Hardening Release: September 2026
CVE-2026-20278 8.8 HIGH Cisco IOS XR Software Security Hardening Release: September 2026
CVE-2026-20275 8.8 HIGH Cisco IOS XR Software Security Hardening Release: September 2026
CVE-2026-20276 8.6 HIGH Cisco IOS XR Software Security Hardening Release: September 2026
CVE-2026-20277 8.2 HIGH Cisco IOS XR Software Security Hardening Release: September 2026
CVE-2026-20281 7.5 HIGH Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP
CVE-2026-20355 5.9 MEDIUM Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty
CVE-2026-20354 5.9 MEDIUM Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

IV. Related Vulnerabilities

Same product: Cisco NX-OS Software
Same vendor: Cisco
Same weakness: CWE-1327

V. Comments for CVE-2026-20212

No comments yet

Leave a comment