Summary

• Cisco released its semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publication on February 23, 2022. In direct response to customer feedback, Cisco releases bundles of Cisco FXOS and NX-OS Software Security Advisories on the fourth Wednesday of the month in February and August of each calendar year.

  The February 23, 2022, release of the Cisco FXOS and NX-OS Software Security Advisory Bundled Publication includes four Cisco Security Advisories that describe four vulnerabilities in Cisco FXOS Software, Cisco NX-OS Software, and Cisco UCS Software. Cisco has released software updates that address these vulnerabilities.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score	Affected Platforms
  cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2 Cisco NX-OS Software NX-API Command Injection Vulnerability	CVE-2022-20650	High	8.8	Nexus 3000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode
  cisco-sa-cfsoip-dos-tpykyDr Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability	CVE-2022-20624	High	8.6	Nexus 3000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode UCS 6400 Series Fabric Interconnects
  cisco-sa-nxos-bfd-dos-wGQXrzxn Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability	CVE-2022-20623	High	8.6	Nexus 9000 Series Switches in standalone NX-OS mode
  cisco-sa-cdp-dos-G8DPLWYG Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability	CVE-2022-20625	Medium	4.3	Firepower 4100 Series Firepower 9300 Security Appliances MDS 9000 Series Multilayer Switches Nexus 1000 Virtual Edge for VMware vSphere Nexus 1000V Switch for Microsoft Hyper-V Nexus 1000V Switch for VMware vSphere Nexus 3000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode Nexus 9000 Series Switches in standalone NX-OS mode UCS 6200 Series Fabric Interconnects UCS 6300 Series Fabric Interconnects UCS 6400 Series Fabric Interconnects

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A