CVE-2026-20212
Qualys 위협 인텔 · 심각도 5/5 · QID 317878 · Cisco
측면이동
쉬운 악용
대량 데이터 유출
서비스 거부
원격코드실행
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges.
This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.
This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.
타임라인
- NVD 공개
- 첫 보도 Cisco PSIRT · Cisco Nexus 9000 시리즈 스위치의 Silicon One 원격 코드 실행…
- 최근 보도 (총 5건) BleepingComputer · 인프라트러스트(InfraTrust) 보고서, 네트워크 관리 시스템이 …
날짜 정보 없는 신호: 공개 PoC 1건
벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
공개 익스플로잇 / PoC
- GitHub 공개 PoC 1건 — 대표 레포 ↗