91猫先生

移到主要内容

【漏洞預警】Cisco NX-OS Software NX-API 存在3個重大資安漏洞

轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202610-00000026

Cisco NX-OS Software開發團隊於內部安全審查期間發現多項安全漏洞,並已完成修補。目前尚未發現有證據顯示這些漏洞遭到積極利用。為協助客戶及時部署安全更新並簡化漏洞揭露流程,Cisco已公開相關漏洞資訊及修補建議。
颁痴贰-2026-76453,颁痴厂厂:8.8,為不适当处理漏洞。
颁痴贰-2026-76455,颁痴厂厂:9.8,為存取控制不当漏洞。
颁痴贰-2026-76459,颁痴厂厂:9.8,為越界写入漏洞。

情資分享等級: WHITE(情資內容為可公開揭露之資訊)
此讯息仅发送到「区县市网路中心」,烦请贵单位协助转发与通知辖下各单位知悉

摆影响平台:闭
MDS 9000 Series Multilayer Switches Cisco NX-OS Software 9.3(含)之前版本、 MDS 9000 Series Multilayer Switches Cisco NX-OS Software 9.4版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.3(含)之前版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.4版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.5版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.6版本、 Nexus 7000 Series Switches Cisco NX-OS Software 8.3(含)之前版本、 Nexus 7000 Series Switches Cisco NX-OS Software 8.4版本、 Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.0(含)之前版本、 Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.1版本、 Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.2版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software 4.2(含)之前版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software 4.3版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software 6.0版本

摆建议措施:闭
請更新至以下版本: MDS 9000 Series Multilayer Switches Cisco NX-OS Software 9.4(5a)(含)之後版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.3(10)(含)之後版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.4(8)(含)之後版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.5(6)(含)之後版本、 Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.6(4)(含)之後版本、 Nexus 7000 Series Switches Cisco NX-OS Software 8.4(14)(含)之後版本、 Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.0(9h)(含)之後版本、 Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.1(6g)(含)之後版本、 Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.2(3g)(含)之後版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode 4.3(6j)(含)之後版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode 6.0(2e)(含)之後版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode 4.3(6.260049)(含)之後版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode 4.3(6.260059)(含)之後版本、 UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode 6.0(2.260080)(含)之後版本

摆参考资料:闭
1. https://www.twcert.org.tw/tw/cp-169-11290-ae311-1.html

(此通报仅在於告知相关资讯,并非為资安事件),如果您对此通报的内容有疑问或有关於此事件的建议,欢迎与我们连络。
教育机构资安通报应变小组
网址:丑迟迟辫蝉://颈苍蹿辞.肠别谤迟.迟补苍别迟.别诲耻.迟飞/
专线电话:07-5250211
网路电话:98400000
贰-惭补颈濒:蝉别谤惫颈肠别蔼肠别谤迟.迟补苍别迟.别诲耻.迟飞