Cisco Nexus devices zero day raises alarms despite CVSS score

Though the NX-OS CVE only has a 6.0 score, a suspected espionage actor is deploying custom malware to exploit a command injection vulnerability in a range of switching devices.

actor alarms cisco cisco nexus command command injection command injection vulnerability custom cve cvss cvss score devices espionage exploit injection malware nexus nx-os score vulnerability