Cisco Alert
3084Warning Date
Severity Level
Warning Number
Target Sector
24 February, 2022
● High
2022-4429
All
Cisco has released security warnings to address several vulnerabilities in the following products:
- Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service
- Cisco NX-OS Software Cisco Fabric Services Over IP
- Cisco NX-OS Software NX-API
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS)
- Command Injection
The CERT team encourages users to review Apache security advisory and apply the necessary mitigations and updates:
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdp-dos-G8DPLWYG
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cfsoip-dos-tpykyDr
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2