Riskcovery

CVE-2026-20212

Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

State
Published
Severity
9.8 Critical
Published
Sep 2, 2026
Updated
Sep 3, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges.

This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hcisco

Weaknesses

  • CWE-1327 Binding to an Unrestricted IP Address

Affected Products

ProductVersions
Cisco NX-OS SoftwareCisco
  • 10.3(1)Affected
  • 10.3(2)Affected
  • 10.3(3)Affected
  • 10.4(1)Affected
  • 10.3(99w)Affected
  • 10.3(3w)Affected
  • 10.3(99x)Affected
  • 10.3(3o)Affected
  • 10.3(4)Affected
  • 10.3(3p)Affected
  • 10.3(4a)Affected
  • 10.4(2)Affected
  • 10.3(3q)Affected
  • 10.3(5)Affected
  • 10.4(3)Affected
  • 10.3(3x)Affected
  • 10.3(4g)Affected
  • 10.5(1)Affected
  • 10.3(3r)Affected
  • 10.3(6)Affected
  • 10.4(4)Affected
  • 10.3(4h)Affected
  • 10.5(2)Affected
  • 10.3(7)Affected
  • 10.4(5)Affected
  • and 20 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.