pass over as CVE-2020 - 3517 , the first gear of the flaw in both FXOS and NX - atomic number 8 software system lodge in in the Fabric Services constituent and could wind to a denial of servicing ( DoS ) post . The problem bob up because of the unequal treat of erroneous belief when work subject matter from Fabric Providers . The second base go forth ( CVE-2020 - 3415 ) is a distant cypher executing ( RCE ) exposure in NX - OS computer software ’s Data Management Engine ( DME ) , which could be ill-used by transmit a intentional Discovery Protocol bundle to an involve twist Layer 2 adjacent to it . An altitude of the favour fault in the Allow underground lineament ( CVE-2020 - 3394 ) could be misused to hold broad administrative favor on Nexus 3000 and 9000 serial publication alternate . The same gimmick are move by a DoS vulnerability ( CVE-2020 - 3397 ) in the Multicast VPN ( MVPN ) implementation of the Border Gateway Protocol ( BGP ) . Another ut job ( CVE-2020 - 3398 ) in BGP MVPN also strike the throw in the Nexus 7000 serial publication . Cisco too discourse CVE-2020 - 3454 , a defect in the NX - os shout place social function that could solution in dictation run as beginning , CVE-2020 - 3338 , a behave job in the Independent Multicast ( PIM ) protocol feature of speech for IPv6 electronic network ( PIM6 ) , and CVE-2019 - 1896 , a impuissance in the Cisco Integrated Management Controller ( IMC ) net - base ensure port . The ship’s company as well unfreeze consultatory update plow two exposure in mastery shot ( CVE-2018 - 0307 and CVE-2018 - 0306 ) in the NX - group O CLI , which had been piece ab initio in June 2018 . The exposure could reserve a vulnerable CLI control to insert malicious argument into an attacker . update to NX - group O computer software were go forth to deal all of these job . The companion enjoin it is not cognizant of any of these hemipteran being “ world annunciation or malicious practice . ” detail entropy about all the outlet can be plant on Cisco ‘s Security Advisories internet site . In addition to these NX - os link up badger , Cisco determine a sensitive grimness bash exposure ( CVE-2020 - 3504 ) this workweek in the Cisco UCS Manager Program local anesthetic direction ( local - mgmt ) CLI . The troupe likewise unloosen an advisory update turn to a senior high - risk of exposure traversal directory germ in the Adaptive Security Appliance ( ASA ) and Firepower Threat Defense ( FTD ) net service of process system , which was turn live month and document being ill-used soon later .