CVE-2014-3330: Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop policy checks for logg...

Security readout for executives and security teams

This vulnerability affects Cisco Nexus 9000 switches running NX-OS 6.1(2)I2(1). If a packet-drop policy includes the log keyword, a remote attacker may be able to overwhelm that policy path and bypass intended access restrictions. The business concern is unauthorized network traffic crossing controls that operators believed were enforced. Exposure appears limited to Cisco Nexus 9000 switches running NX-OS 6.1(2)I2(1), especially where drop or deny policies use the log keyword. The provided sources do not establish broader affected versions or products. Treat this as a targeted network-control risk. It is not sourced as actively exploited, but affected Nexus 9000 switches may fail to enforce intended restrictions under specific logged-policy conditions. Mitigation focus: Check Cisco advisory guidance for CSCuo02489 and affected NX-OS releases.; Inventory Nexus 9000 switches and confirm NX-OS versions.; Prioritize remediation for devices enforcing boundary or segmentation ACLs..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.