Ref# Cisco | Date: Mar 3rd 2020

---

Cisco has released security updates to address vulnerabilities affecting multiple products: FXOS, NX-OS, and Unified Computing System (UCS) software. It is recommended that you take the necessary precautions by ensuring your products are always updated:

• UCS Manager Software Local Management CLI Command Injection Vulnerability cisco-sa-20200226-ucs-cli-cmdinj
• Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability cisco-sa-20200226-nexus-1000v-dos
• MDS 9000 Series Multilayer Switches Denial of Service Vulnerability cisco-sa-20200226-mds-ovrld-dos
• FXOS and UCS Manager Software CLI Command Injection Vulnerability cisco-sa-20200226-fxos-ucs-cmdinj
• FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability cisco-sa-20200226-fxos-ucs-cli-cmdinj
• XOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability cisco-sa-20200226-fxos-nxos-cdp

The Guyana National CIRT recommends users and administration to review these updates as well as the Cisco Event Response page and to apply them where necessary.

 

References

• Cisco Releases Security Updates. (2020, February 27). Retrieved from Us-Cert: https://www.us-cert.gov/ncas/current-activity/2020/02/27/cisco-releases-security-updates