CISCO WARNS OF CRITICAL FLAWS ALLOWING NEXUS SWITCH TAKEOVER

Summary from the TLDR InfoSec newsletter

Cisco announced security advisories for five critical vulnerabilities in its NX-OS data center operating system that could allow remote code execution on Nexus switches. Successful exploitation depends on the NX-API, Next Generation OAM, and MPLS OAM features being enabled. Cisco recommends disabling these features if they aren't necessary and upgrading to a patched version.