Nine bugs were patched, eight of which are rated ‘high’ severity.

Cisco Systems disclosed eight high-severity bugs impacting a range of its networking gear, including its switches and fiber storage solutions. Cisco’s NX-OS was hardest hit, with six security alerts tied to the network operating system that underpins the networking giant’s Nexus-series Ethernet switches and MDS-series Fibre Channel storage area network switches.

Patches are available for all vulnerabilities, according to a Cisco Security Advisory posted on Wednesday. In addition to the eight patched high-severity bugs, Cisco also fixed a flaw (CVE-2020-3504) listed as medium severity that impacts the Cisco Unified Computing System management software.

High-severity vulnerabilities impacting Cisco’s NX-OS software include CVEs tracked as CVE-2020-3397, CVE-2020-3398, CVE-2020-3338, CVE-2020-3415, CVE-2020-3517 and CVE-2020-3454.

Two bugs (CVE-2020-3397 and CVE-2020-3398) are “Cisco NX-OS software Border Gateway Protocol Multicast VPN denial of service vulnerabilities,” according to the security bulletin. Both vulnerabilities allow an attacker to launch either a partial or prolonged DoS attack via session resets and device reloading.

#cloud security #cisco systems #vpn #cloud computing #cloud #fibre storage