CVE-2026-20212— Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
Quick assessment
Affected
Cisco Cisco NX-OS Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco NX-OS Software是美国Cisco公司的一款面向数据中心网络设备的操作系统。 Cisco NX-OS Software存在配置错误漏洞，该漏洞源于默认L3 VRF中TCP端口43210和43211可访问，可能导致未经身份验证的远程攻击者连接受影响设备并发送特制输入，以root权限执行代码，还可能导致S1HAL进程崩溃，造成设备重新加载。以下版本受到影响：10.3(1)版本、10.3(2)版本、10.3(3)版本、10.4(1)版本、10.3(99w)版本、10.3(3w)版本、10.
In-the-Wild Activity Observed
github_trending · low
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 45
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco NX-OS Software | 10.3(1) |
affected |
10.3(2) |
affected | ||
10.3(3) |
affected | ||
10.4(1) |
affected | ||
10.3(99w) |
affected | ||
10.3(3w) |
affected | ||
10.3(99x) |
affected | ||
10.3(3o) |
affected | ||
| … +37 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-20212
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges.
This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1327
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco NX-OS Software 配置错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco NX-OS Software是美国Cisco公司的一款面向数据中心网络设备的操作系统。 Cisco NX-OS Software存在配置错误漏洞，该漏洞源于默认L3 VRF中TCP端口43210和43211可访问，可能导致未经身份验证的远程攻击者连接受影响设备并发送特制输入，以root权限执行代码，还可能导致S1HAL进程崩溃，造成设备重新加载。以下版本受到影响：10.3(1)版本、10.3(2)版本、10.3(3)版本、10.4(1)版本、10.3(99w)版本、10.3(3w)版本、10.
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS Software | 10.3(1) | - |
|
II. Public POCs for CVE-2026-20212
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20212
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20212 (1)
Same Patch Batch · Cisco · 2026-09-02 · 11 CVEs total
| CVE-2026-20279 | 9.8 CRITICAL | Cisco IOS XR Software Security Hardening Release: September 2026 |
| CVE-2026-20274 | 9.8 CRITICAL | Cisco IOS XR Software Security Hardening Release: September 2026 |
| CVE-2026-20280 | 8.8 HIGH | Cisco IOS XR Software Security Hardening Release: September 2026 |
| CVE-2026-20278 | 8.8 HIGH | Cisco IOS XR Software Security Hardening Release: September 2026 |
| CVE-2026-20275 | 8.8 HIGH | Cisco IOS XR Software Security Hardening Release: September 2026 |
| CVE-2026-20276 | 8.6 HIGH | Cisco IOS XR Software Security Hardening Release: September 2026 |
| CVE-2026-20277 | 8.2 HIGH | Cisco IOS XR Software Security Hardening Release: September 2026 |
| CVE-2026-20281 | 7.5 HIGH | Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP |
| CVE-2026-20355 | 5.9 MEDIUM | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty |
| CVE-2026-20354 | 5.9 MEDIUM | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty |
IV. Related Vulnerabilities
Same product: Cisco NX-OS Software
-
CVE-2026-76501
Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Cod -
CVE-2026-76486
Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) -
CVE-2026-76485
Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) -
CVE-2026-76458
Cisco NX-OS Software Security Hardening Release: October 202 -
CVE-2026-76459
Cisco NX-OS Software Security Hardening Release: October 202
Same vendor: Cisco
-
CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerabilit -
CVE-2026-76472
Cisco Meraki Security Hardening Release October 2026 - Impro -
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime -
CVE-2026-76470
Cisco Meraki Hardening Release - Incorrect Calculation Vulne -
CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insuff
Same weakness: CWE-1327
-
CVE-2026-108760
LlamaFarm through 0.0.34 Unauthenticated API Exposed on All -
CVE-2026-100868
Penpot before 2.18.0 Unauthenticated WebSocket Access via MC -
CVE-2026-75021
fastify-cli vulnerable to remote code execution via ignored -
CVE-2026-82456
argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated H -
CVE-2026-72924
GitHub CLI: `gh codespace ports forward` exposes forwarded s
V. Comments for CVE-2026-20212
No comments yet