Cisco Patches Five Critical Nexus Switch Flaws Enabling Root Code Execution (NX-OS)

Scope: Cisco NX-OS data center network operating system, affecting Cisco Nexus switch product lines

Severity: Red

Cisco released security advisories addressing five critical vulnerabilities in NX-OS, the operating system running on Cisco Nexus switches, which form the backbone hardware of many enterprise and data center networks. Successful exploitation of these flaws allows an attacker to execute arbitrary code with root privileges on affected switches, representing a complete compromise of the network device rather than a partial foothold. Given that Nexus switches typically sit at the core of network infrastructure, a compromised switch gives an attacker visibility and control over everything passing through it, making this a significant risk for any organisation running Nexus hardware in production. Organisations running Cisco Nexus switches must apply the relevant NX-OS security advisory for their specific switch model today, and should restrict management plane access to trusted administrative networks only as a standing control regardless of patch status.

The Uganda National CERT and Coordination Center (CERT.UG/CC) encourages users and administrators to review the recommendations and apply the necessary updates.