The version of AOS installed on the remote host is prior to 7.3.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.2 advisory.

  - A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system. (CVE-2025-32990)

  - Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was     introduced which means that the entire temporary file is read into memory and then logged. An attacker     might be able to exploit this to cause a denial of service attack by causing an out of memory exception.
    In addition, it is possible to configure CXF to encrypt temporary files to prevent sensitive credentials     from being cached unencrypted on the local filesystem, however this bug means that the cached files are     written out to logs unencrypted. Users are recommended to upgrade to versions 3.5.11, 3.6.6, 4.0.7 or     4.1.1, which fixes this issue. (CVE-2025-48795)

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

  - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1551 contains a patch for the vulnerability. (CVE-2025-53906)

  - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle     attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how     OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be     considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning     the attack complexity high. (CVE-2025-26465)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.2)

high Nessus Plugin ID 277073

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Mar 10, 2026, 10:49 PM CVE (set "CVE" coverage to "CVE-2025-6395,CVE-2025-26465,CVE-2025-32988,CVE-2025-32990,CVE-2025-41244,CVE-2025-48795,CVE-2025-53905,CVE-2025-53906,CVE-2025-58060") Plugin metadata Plugin Feed: 202603102249
Version 1.3 Dec 19, 2025, 2:41 AM CVE (set "CVE" coverage to "CVE-2025-6395,CVE-2025-26465,CVE-2025-32988,CVE-2025-32990,CVE-2025-41244,CVE-2025-53905,CVE-2025-53906,CVE-2025-58060") Plugin metadata Plugin Feed: 202512190241
Version 1.2 Dec 15, 2025, 9:39 PM CVE (set "CVE" coverage to "CVE-2025-6395,CVE-2025-26465,CVE-2025-32988,CVE-2025-32990,CVE-2025-41244,CVE-2025-48795,CVE-2025-53905,CVE-2025-53906,CVE-2025-58060") Plugin metadata Plugin Feed: 202512152139
Version 1.1 Dec 3, 2025, 3:34 AM New Plugin Feed: 202512030334