Cisco warns of critical flaws allowing Nexus switch takeover

Five critical vulnerabilities in Cisco's NX-OS operating system expose Nexus 3000 and 9000 Series switches to arbitrary code execution with root privileges and denial-of-service attacks, stemming from inadequate input validation in key features like NX-API, NGOAM, and MPLS OAM. The root cause — poor input validation — is a foundational software security failure that should be caught during development and pre-release testing. What makes this especially dangerous is that these are core data center switches; a successful takeover could give an attacker full control over network infrastructure, enabling traffic interception, lateral movement, or complete outages. Organizations running these devices must treat this as a critical-priority remediation, particularly since the attack surface is narrowed only by whether specific features are enabled — a configuration detail many teams may not actively track.