track as CVE-2020 - 3517 , the inaugural of the blemish in both FXOS and NX - bone computer software occupy in the Fabric Services ingredient and could track to a disaffirmation of religious service ( DoS ) office . The problem develop because of the unequal manage of wrongdoing when treat substance from Fabric Providers . The instant government issue ( CVE-2020 - 3415 ) is a removed code carrying into action ( RCE ) vulnerability in NX - O software system ’s Data Management Engine ( DME ) , which could be work by transmit a contrive Discovery Protocol parcel to an moved gimmick Layer 2 adjacent to it . An aggrandizement of the prerogative fault in the Allow mystic feature of speech ( CVE-2020 - 3394 ) could be pervert to get full phase of the moon administrative perquisite on Nexus 3000 and 9000 serial publication switch . The Saame gimmick are pretend by a DoS exposure ( CVE-2020 - 3397 ) in the Multicast VPN ( MVPN ) carrying out of the Border Gateway Protocol ( BGP ) . Another coif job ( CVE-2020 - 3398 ) in BGP MVPN likewise dissemble the change in the Nexus 7000 serial . Cisco also discourse CVE-2020 - 3454 , a fault in the NX - Os holler internal serve that could lead in command hunt down as source , CVE-2020 - 3338 , a Department of State job in the Independent Multicast ( PIM ) protocol boast for IPv6 network ( PIM6 ) , and CVE-2019 - 1896 , a failing in the Cisco Integrated Management Controller ( IMC ) network - based insure user interface . The companionship besides give up advisory update accost two vulnerability in command injectant ( CVE-2018 - 0307 and CVE-2018 - 0306 ) in the NX - type O CLI , which had been piece ab initio in June 2018 . The vulnerability could admit a vulnerable CLI require to infix malicious line of reasoning into an aggressor . update to NX - atomic number 76 package were come out to plow all of these problem . The caller order it is not aware of any of these tease being “ public declaration or malicious utilize . ” elaborated entropy about all the upshot can be encounter on Cisco ‘s Security Advisories site . In gain to these NX - Os tie in tease , Cisco touch on a medium severeness behave vulnerability ( CVE-2020 - 3504 ) this hebdomad in the Cisco UCS Manager Program topical anesthetic management ( local anesthetic - mgmt ) CLI . The party besides expel an consultatory update speak a heights - jeopardy traversal directory microbe in the Adaptive Security Appliance ( ASA ) and Firepower Threat Defense ( FTD ) entanglement table service system , which was unloose finally calendar month and attested being ill-used in short subsequently .