Summary

• Cisco released its semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publication on February 26, 2025. In direct response to customer feedback, Cisco releases bundles of Cisco FXOS and NX-OS Software Security Advisories on the fourth Wednesday of the month in February and August of each calendar year.

  The February 26, 2025, release of the Cisco FXOS and NX-OS Software Security Advisory Bundled Publication includes two Cisco Security Advisories that describe two vulnerabilities in Cisco NX-OS Software. Cisco has released software updates that address these vulnerabilities.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score	Affected Software	Affected Hardware Platforms
  Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability	CVE-2025-20111	High	7.4	NX-OS Software	Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches
  Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability	CVE-2025-20161	Medium	5.1	NX-OS Software	Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A