CVE-2026-20212
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco NX-OS Software
- Vendor
- Cisco
- Product
- Cisco NX-OS Software
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 10.3(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(99w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(99x) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3q) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3x) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3r) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(4g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.6(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(3t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(8) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(3s) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(3e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(3o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.6(1s) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.6(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(3p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(9) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.6(2s) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.6(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.6(2n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.6(3s) | affected | Unavailable | Unavailable | Unavailable | None listed |