GHSA-6G5H-4MV8-PRV7严重未审查

无摘要

OSV 1.4.0 · unreviewed · 修改于 2026-09-03 02:32

发布时间

2026-09-03 02:32

GitHub 审查时间

—

NVD 发布时间

2026-09-03 01:17

源文件

advisories/unreviewed/2026/09/GHSA-6g5h-4mv8-prv7/GHSA-6g5h-4mv8-prv7.json

公告说明

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges.

This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.

受影响的软件包

该公告没有提供结构化的受影响软件包信息。

参考链接

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-20212

标识信息

别名 / CVE

CVE-2026-20212

CWE

CWE-1327

软件生态

无

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

原始 OSV JSON

{
  "id": "GHSA-6g5h-4mv8-prv7",
  "aliases": [
    "CVE-2026-20212"
  ],
  "details": "A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with&nbsp;root privileges.\n\nThis vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with&nbsp;root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.",
  "affected": [],
  "modified": "2026-09-02T18:32:25Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "published": "2026-09-02T18:32:25Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20212",
      "type": "ADVISORY"
    },
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-1327"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "nvd_published_at": "2026-09-02T17:17:31Z",
    "github_reviewed_at": null
  }
}