This page was not yet optimized for use on mobile devices.

Cisco Nexus 9000 Series Switches, software version Cisco NX-OS version 10.4(5)(M)

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

Webpage information

Certificate ID	EUCC-3110-2025-2500098-01-00000
Product name	Cisco Nexus 9000 Series Switches, software version Cisco NX-OS version 10.4(5)(M)
Scheme	🇳🇱 NL
Assurance level	substantial
Status	active

Product Specification

Type	Generic software and network products
Description	The Cisco Nexus 9K Series are data center-class switches for use as an aggregation switch in the data center. Cisco NX-OS is a Cisco-developed highly ... The Cisco Nexus 9K Series are data center-class switches for use as an aggregation switch in the data center. Cisco NX-OS is a Cisco-developed highly configurable proprietary operating system that provides for efficient and effective routing and switching.
Version	Cisco NX-OS version 10.4(5)(M)
Package	EAL1 augmented with ALC_FLR.2 , ASE_SPD.1

Certificate holder

Name	Cisco Systems, Inc
Address	170 West Tasman Drive, 95134 San Jose, CA
Contact information	[email protected]
Website	https://www.cisco.com/c/en/us/solutions/industries/government/global-government…

Certification body

Name	TrustCB B.V.
NANDO ID	3110
Address	Van den Berghlaan 48, 2132 AT, HOOFDDORP
Contact information	[email protected] Phone: +31 23 737 0800

Standards & Compliance

CC Version	CC 3.1 Revision 5
CEM Version	CEM 3.1 Revision 5
AVA_VAN level	1
Certification report reference	EUCC-3110-2025-12-0098-01 Certification Report v2

Other

ITSEF	SGS Brightsight B.V.
Responsible NCCA	Rijksinspectie Digitale Infrastructuur
Protection profile	collaborative Protection Profile for Network Devices, version 3.0e dated 06 December 2023, validated under NIAP 25 April 2024
Certification date	03.12.2025
Archived date	03.12.2030

Certificate webpage

Certificate

Certificate PDF TXT

Extracted keywords

Vendor

Cisco, Cisco Systems, Inc

Security Assurance Requirements (SAR)

ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_CMS.1, ALC_FLR.2, ATE_IND.1, AVA_VAN.1, ASE_INT.1, ASE_CCL.1, ASE_SPD.1, ASE_OBJ.1, ASE_ECD.1

Evaluation facilities

SGS, SGS Brightsight, Brightsight

Standards

ISO/IEC 15408-1, ISO/IEC 18045

Author	V T
Creation date	D:20260208203651+00'00'
Modification date	D:20260208203651+00'00'
Pages	1
Creator	Microsoft® Word 2021
Producer	Microsoft® Word 2021

Certification report

Certification report PDF TXT

Extracted keywords

Symmetric Algorithms

AES, CBC-MAC

Asymmetric Algorithms

ECDH, ECDSA, ECC, Diffie-Hellman

Schemes

MAC

Protocols

SSHv2, SSH, TLS, IKE, IPsec

Randomness

TRNG, RNG

Block cipher modes

CBC

Vendor

Cisco, Cisco Systems, Inc

Security level

EAL1, EAL1 augmented

Security Assurance Requirements (SAR)

ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_CMS.1, ALC_FLR.2, ATE_IND.1, AVA_VAN.1, ASE_INT.1, ASE_CCL.1, ASE_SPD.1, ASE_OBJ.1, ASE_ECD.1

Evaluation facilities

SGS, SGS Brightsight, Brightsight

Certification process

out of scope, a secure location. • The TOE does not protect against non-management network traffic, e.g. DoS is out of scope. Page: 9/17 of EUCC-3110-2025-12-0098-01 Certification Report v2, 3 December 2025 ®TrustCB is a

Standards

ISO/IEC 17065, ISO/IEC 17025, ISO/IEC 18045

Title	Certification Report - EUCC
Author	Valerie
Creation date	D:20260208204555+00'00'
Modification date	D:20260208204555+00'00'
Pages	17
Creator	Microsoft® Word 2021
Producer	Microsoft® Word 2021

Frontpage

Certificate ID	EUCC-3110-2025-12-0098-01 Certification Report
Certified item	Cisco Nexus 9000 Series Switches, software version Cisco NX-OS version 10.4(5)(M
Certification lab	SGS Brightsight B.V.
Developer	Cisco Systems, Inc

Security target

Security target PDF TXT

Extracted keywords

Symmetric Algorithms

AES, HMAC, HMAC-SHA-256, HMAC-SHA-512

Asymmetric Algorithms

ECDH, ECDSA, ECC, Diffie-Hellman, DH

Hash functions

SHA-256, SHA-384, SHA-512, SHA256

Schemes

MAC

Protocols

SSH, SSHv2, SSL 2.0, SSL 3.0, TLS, TLS 1.2, TLSv1.2, TLS 1.0, TLS 1.1, IKE, IPsec

Randomness

RNG, RBG

Elliptic Curves

P-256, P-384, P-521, secp256r1, secp384r1, secp521r1

Block cipher modes

CBC, CTR, GCM

TLS cipher suites

TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

Vendor

Cisco, Cisco Systems, Inc, Cisco Systems

Claims

O.OBJECTIVE, T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.WEAK_CRYPTOGRAPHY, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.WEAK_AUTHENTICATION_ENDPOINTS, T.UPDATE_COMPROMISE, T.UNDETECTED_ACTIVITY, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.SECURITY_FUNCTIONALITY_FAILURE, A.ASE, A.PHYSICAL_PROTECTION, A.LIMITED_FUNCTIONALITY, A.NO_THRU_TRAFFIC_PROTECTION, A.TRUSTED_ADMINISTRATOR, A.REGULAR_UPDATES, A.ADMIN_CREDENTIALS_SECURE, A.RESIDUAL_INFORMATION, OE.OBJECTIVE, OE.PHYSICAL, OE.NO_GENERAL_PURPOSE, OE.NO_THRU_TRAFFIC_PROTECTION, OE.TRUSTED_ADMIN, OE.UPDATES, OE.ADMIN_CREDENTIALS_SECURE, OE.RESIDUAL_INFORMATION

Security Assurance Requirements (SAR)

ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, AGD_OPE, AGD_PRE, ALC_FLR.2, ALC_CMC.1, ALC_CMS.1, ATE_IND.1, AVA_VAN.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.1, ASE_REQ.1, ASE_SPD.1, ASE_TSS.1

Security Functional Requirements (SFR)

FAU_GEN.1, FAU_GEN.2, FAU_STG_EXT.1, FAU_GEN.1.2, FAU_GEN.1.1, FAU_GEN.2.1, FAU_STG_EXT.1.1, FAU_STG_EXT.1.2, FAU_STG_EXT.1.3, FAU_STG_EXT.1.4, FAU_STG_EXT.1.5, FAU_STG_EXT.1.6, FCS_CKM.1, FCS_CKM.2, FCS_CKM.4, FCS_COP, FCS_RBG_EXT.1, FCS_SSH_EXT.1, FCS_SSHS_EXT.1, FCS_TLSC_EXT, FCS_SSH_EXT.1.1, FCS_SSHS_EXT.1.3, FCS_TLSC_EXT.1, FCS_CKM.1.1, FCS_CKM.2.1, FCS_CKM.4.1, FCS_COP.1, FCS_RBG_EXT.1.1, FCS_RBG_EXT.1.2, FCS_SSH_EXT.1.2, FCS_SSH_EXT.1.3, FCS_SSH_EXT.1.4, FCS_SSH_EXT.1.5, FCS_SSH_EXT.1.6, FCS_SSH_EXT.1.7, FCS_SSH_EXT.1.8, FCS_SSHS_EXT.1.1, FCS_TLSC_EXT.1.1, FCS_TLSC_EXT.1.2, FCS_TLSC_EXT.1.3, FCS_TLSC_EXT.1.4, FCS_TLSC_EXT.1.5, FCS_TLSC_EXT.1.6, FCS_TLSC_EXT.1.7, FCS_TLSC_EXT.1.8, FCS_TLSC_EXT.1.9, FIA_AFL.1, FIA_PMG_EXT.1, FIA_UIA_EXT.1, FIA_UAU.7, FIA_UIA_EXT.1.3, FIA_PSK_EXT.1, FIA_UAU_EXT.2, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PMG_EXT.1.1, FIA_UIA_EXT.1.1, FIA_UIA_EXT.1.2, FIA_UIA_EXT.1.4, FIA_UAU.7.1, FMT_MOF, FMT_MTD, FMT_SMF.1, FMT_SMR.2, FMT_MOF.1, FMT_MTD.1, FMT_SMF.1.1, FMT_SMR.2.1, FMT_SMR.2.2, FMT_SMR.2.3, FPT_APW_EXT.1, FPT_SKP_EXT, FPT_STM_EXT.1, FPT_TST_EXT, FPT_TUD_EXT.1, FPT_TST_EXT.1, FPT_SKP_EXT.1, FPT_APW_EXT.1.1, FPT_APW_EXT.1.2, FPT_SKP_EXT.1.1, FPT_STM_EXT.1.1, FPT_STM_EXT.1.2, FPT_TST_EXT.1.1, FPT_TST_EXT.1.2, FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.2, FPT_TUD_EXT.1.3, FTA_SSL_EXT.1, FTA_SSL.3, FTA_SSL.4, FTA_TAB.1, FTA_SSL_EXT.1.1, FTA_SSL.4.1, FTA_TAB.1.1, FTP_ITC.1, FTP_TRP, FTP_TRP.1, FTP_ITC.1.1, FTP_ITC.1.2

Certificates

CCEVS-VR-VID11514-2025

Standards

FIPS 140-3, FIPS PUB 186-5, FIPS PUB 186-4, FIPS 186-4, FIPS PUB 140-3, FIPS PUB 186-3, FIPS PUB 180-3, FIPS PUB 198-1, NIST SP 800-186, NIST SP 800-56B, NIST SP 800-90A, PKCS #1, RFC 5280, RFC 3447, RFC 3526, RFC 4252, RFC 8332, RFC 5656, RFC 4253, RFC 4344, RFC 5647, RFC 6668, RFC 5246, RFC 3268, RFC 4492, RFC 5288, RFC 5289, RFC 6125, RFC 8446, RFC 6960, ISO/IEC 15408, ISO/IEC 14888-3, ISO/IEC 9796-2, ISO/IEC 18031:2011, X.509, CCMB-2017-04-001, CCMB-2017-04-002, CCMB-2017-04-003

Title	Cisco MDS 9000 Series Switches Security Target
Author	Cisco SRE
Creation date	D:20251203161529+01'00'
Modification date	D:20251203161529+01'00'
Pages	83
Creator	Microsoft® Word LTSC
Producer	Microsoft® Word LTSC

Heuristics

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

Extracted SARs

ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_CMS.1, ALC_FLR.2, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.1, ASE_REQ.1, ASE_SPD.1, ASE_TSS.1, ATE_IND.1, AVA_VAN.1

CPE matches

Related CVEs

ID	Links	Severity	CVSS Score	Published on
ID	Links	Severity	Base score	Published on
CVE-2024-20267	C N	HIGH	8.6	29.02.2024
CVE-2024-20321	C N	HIGH	8.6	29.02.2024

Updates Feed

03.06.2026

The certificate data changed.
Certificate changed

The Valid from date was updated.

The new value is 2025-12-03.

The Valid until date was updated.

The new value is 2030-12-03.
03.06.2026

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.eucc.EUCCCertificate",
  "category": "GENERIC SOFTWARE AND NETWORK PRODUCTS",
  "cert_id": "EUCC-3110-2025-2500098-01-00000",
  "cert_link": "https://certification.enisa.europa.eu/document/download/d9316641-85b4-4aa1-bedc-e6c223c6cec6_en?filename=EUCC-3110-2025-12-2500098-01%20Certificate%20v2.pdf",
  "dgst": "ebe327f985db3176",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": null,
    "cert_lab": [
      ""
    ],
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:o:cisco:nx-os:10.4\\(2\\):*:*:*:*:*:*:*",
        "cpe:2.3:o:cisco:nx-os:10.4\\(1\\):*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "eal": "EAL1",
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VAN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_OPE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_REQ",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_CCL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_INT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMC",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_PRE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_OBJ",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_TSS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_FLR",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_ECD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_SPD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMS",
          "level": 1
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "10.4"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": null,
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2024-20267",
        "CVE-2024-20321"
      ]
    },
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": null,
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "manufacturer": "Cisco Systems, Inc",
  "manufacturer_web": "https://www.cisco.com/c/en/us/solutions/industries/government/global-government",
  "name": "Cisco Nexus 9000 Series Switches, software version Cisco NX-OS version 10.4(5)(M)",
  "not_valid_after": "2030-12-03",
  "not_valid_before": "2025-12-03",
  "other_metadata": {
    "_type": "sec_certs.sample.eucc.EUCCCertificate.EnisaMetadata",
    "assurance_level": "Substantial",
    "ava_van_level": "1",
    "cc_version": "CC 3.1 Revision 5",
    "cem_version": "CEM 3.1 Revision 5",
    "certificate_id": "EUCC-3110-2025-2500098-01-00000",
    "certificate_yearly_number": "2500098-01",
    "certification_body": "TrustCB B.V.",
    "certification_body_address": "Van den Berghlaan 48, 2132 AT, HOOFDDORP",
    "certification_body_contact": "[email protected] Phone: +31 23 737 0800",
    "holder_address": "170 West Tasman Drive, 95134 San Jose, CA",
    "holder_contact": "[email protected]",
    "holder_name": "Cisco Systems, Inc",
    "holder_website": "https://www.cisco.com/c/en/us/solutions/industries/government/global-government\u2026",
    "issuance_date_full": "03/12/2025",
    "issuance_month": "12",
    "issuance_year": "2025",
    "itsef": "SGS Brightsight B.V.",
    "modification_or_reassurance": null,
    "nando_id": "3110",
    "package": {
      "EAL1": [
        "ALC_FLR.2",
        "ASE_SPD.1"
      ]
    },
    "product_description": "The Cisco Nexus 9K Series are data center-class switches for use as an aggregation switch in the data center. Cisco NX-OS is a Cisco-developed highly configurable proprietary operating system that provides for efficient and effective routing and switching.",
    "product_name": "Cisco Nexus 9000 Series Switches,  software version Cisco NX-OS version 10.4(5)(M)",
    "product_type": "Generic software and network products",
    "product_version": "Cisco NX-OS version 10.4(5)(M)",
    "protection_profile": "collaborative Protection Profile for Network Devices, version 3.0e dated 06 December 2023, validated under NIAP 25 April 2024",
    "report_reference": "EUCC-3110-2025-12-0098-01 Certification Report v2",
    "responsible_ncca": "Rijksinspectie Digitale Infrastructuur",
    "scheme": "(UE) 2024/482 - EUCC",
    "validity_period_years": "5 years"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": "d9316641-85b4-4aa1-bedc-e6c223c6cec6_en",
    "cert_frontpage": null,
    "cert_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 1
        },
        "AGD": {
          "AGD_OPE.1": 1,
          "AGD_PRE.1": 1
        },
        "ALC": {
          "ALC_CMC.1": 1,
          "ALC_CMS.1": 1,
          "ALC_FLR.2": 1
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.1": 1,
          "ASE_SPD.1": 1
        },
        "ATE": {
          "ATE_IND.1": 1
        },
        "AVA": {
          "AVA_VAN.1": 1
        }
      },
      "cc_security_level": {},
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "BrightSight": {
          "Brightsight": 1
        },
        "SGS": {
          "SGS": 1,
          "SGS Brightsight": 1
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "ISO": {
          "ISO/IEC 15408-1": 1,
          "ISO/IEC 18045": 2
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 2,
          "Cisco Systems, Inc": 1
        }
      },
      "vulnerability": {}
    },
    "cert_metadata": {
      "/Author": "V T",
      "/CreationDate": "D:20260208203651+00\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2021",
      "/ModDate": "D:20260208203651+00\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2021",
      "pdf_file_size_bytes": 374122,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "file:///G:/Shared%20drives/Certifications/Certifications/EUCC/2500052%20NXP%20JCOP%207.x_eUICC_SN300%20B1.1/Cert%20docs/superceded/www.trustcb.com",
          "mailto:[email protected]",
          "https://www.cisco.com/c/en/us/solutions/industries/government/global-government-certifications/common-criteria.html",
          "mailto:[email protected]"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 1
    },
    "report_filename": "3a69c15b-7f04-4ceb-b9b3-3c579db35289_en",
    "report_frontpage": {
      "NL": {
        "cert_id": "EUCC-3110-2025-12-0098-01 Certification Report",
        "cert_item": "Cisco Nexus 9000 Series Switches, software version Cisco NX-OS version 10.4(5)(M",
        "cert_lab": " SGS Brightsight B.V.",
        "developer": "Cisco Systems, Inc"
      }
    },
    "report_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 1
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 1
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 4
        },
        "AGD": {
          "AGD_OPE.1": 4,
          "AGD_PRE.1": 4
        },
        "ALC": {
          "ALC_CMC.1": 4,
          "ALC_CMS.1": 4,
          "ALC_FLR.2": 11
        },
        "ASE": {
          "ASE_CCL.1": 4,
          "ASE_ECD.1": 4,
          "ASE_INT.1": 4,
          "ASE_OBJ.1": 4,
          "ASE_SPD.1": 5
        },
        "ATE": {
          "ATE_IND.1": 4
        },
        "AVA": {
          "AVA_VAN.1": 4
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL1": 1,
          "EAL1 augmented": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {
        "OutOfScope": {
          "a secure location. \u2022 The TOE does not protect against non-management network traffic, e.g. DoS is out of scope. Page: 9/17 of EUCC-3110-2025-12-0098-01 Certification Report v2, 3 December 2025 \u00aeTrustCB is a": 1,
          "out of scope": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 1
        },
        "IPsec": {
          "IPsec": 1
        },
        "SSH": {
          "SSH": 5,
          "SSHv2": 4
        },
        "TLS": {
          "TLS": {
            "TLS": 4
          }
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "BrightSight": {
          "Brightsight": 3
        },
        "SGS": {
          "SGS": 3,
          "SGS Brightsight": 3
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 1
        },
        "TRNG": {
          "TRNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "ISO": {
          "ISO/IEC 17025": 2,
          "ISO/IEC 17065": 2,
          "ISO/IEC 18045": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 1
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 51,
          "Cisco Systems, Inc": 4
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Valerie",
      "/CreationDate": "D:20260208204555+00\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2021",
      "/ModDate": "D:20260208204555+00\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2021",
      "/Title": "Certification Report - EUCC",
      "pdf_file_size_bytes": 586916,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.cisco.com/c/en/us/solutions/industries/government/global-government-certifications/common-criteria.html",
          "https://trustcb.com/common-criteria/eucc/",
          "mailto:[email protected]",
          "mailto:[email protected]",
          "mailto:[email protected]"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 17
    },
    "st_filename": "9cd8163b-d784-4ba2-9206-b7b7fb69c273_en",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 5
          },
          "ECDH": {
            "ECDH": 2
          },
          "ECDSA": {
            "ECDSA": 2
          }
        },
        "FF": {
          "DH": {
            "DH": 2,
            "Diffie-Hellman": 3
          }
        }
      },
      "cc_cert_id": {
        "US": {
          "CCEVS-VR-VID11514-2025": 1
        }
      },
      "cc_claims": {
        "A": {
          "A.ADMIN_CREDENTIALS_SECURE": 1,
          "A.ASE": 1,
          "A.LIMITED_FUNCTIONALITY": 1,
          "A.NO_THRU_TRAFFIC_PROTECTION": 1,
          "A.PHYSICAL_PROTECTION": 2,
          "A.REGULAR_UPDATES": 1,
          "A.RESIDUAL_INFORMATION": 1,
          "A.TRUSTED_ADMINISTRATOR": 1
        },
        "O": {
          "O.OBJECTIVE": 1
        },
        "OE": {
          "OE.ADMIN_CREDENTIALS_SECURE": 1,
          "OE.NO_GENERAL_PURPOSE": 1,
          "OE.NO_THRU_TRAFFIC_PROTECTION": 1,
          "OE.OBJECTIVE": 1,
          "OE.PHYSICAL": 1,
          "OE.RESIDUAL_INFORMATION": 1,
          "OE.TRUSTED_ADMIN": 1,
          "OE.UPDATES": 1
        },
        "T": {
          "T.SECURITY_FUNCTIONALITY_COMPROMISE": 1,
          "T.SECURITY_FUNCTIONALITY_FAILURE": 1,
          "T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 1,
          "T.UNDETECTED_ACTIVITY": 1,
          "T.UNTRUSTED_COMMUNICATION_CHANNELS": 1,
          "T.UPDATE_COMPROMISE": 1,
          "T.WEAK_AUTHENTICATION_ENDPOINTS": 1,
          "T.WEAK_CRYPTOGRAPHY": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 4
        },
        "AGD": {
          "AGD_OPE": 1,
          "AGD_OPE.1": 2,
          "AGD_PRE": 1,
          "AGD_PRE.1": 2
        },
        "ALC": {
          "ALC_CMC.1": 2,
          "ALC_CMS.1": 2,
          "ALC_FLR.2": 4
        },
        "ASE": {
          "ASE_CCL.1": 2,
          "ASE_ECD.1": 2,
          "ASE_INT.1": 2,
          "ASE_OBJ.1": 2,
          "ASE_REQ.1": 2,
          "ASE_SPD.1": 2,
          "ASE_TSS.1": 2
        },
        "ATE": {
          "ATE_IND.1": 2
        },
        "AVA": {
          "AVA_VAN.1": 2
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 5,
          "FAU_GEN.1.1": 1,
          "FAU_GEN.1.2": 2,
          "FAU_GEN.2": 5,
          "FAU_GEN.2.1": 1,
          "FAU_STG_EXT.1": 7,
          "FAU_STG_EXT.1.1": 1,
          "FAU_STG_EXT.1.2": 1,
          "FAU_STG_EXT.1.3": 1,
          "FAU_STG_EXT.1.4": 1,
          "FAU_STG_EXT.1.5": 1,
          "FAU_STG_EXT.1.6": 1
        },
        "FCS": {
          "FCS_CKM.1": 6,
          "FCS_CKM.1.1": 1,
          "FCS_CKM.2": 4,
          "FCS_CKM.2.1": 1,
          "FCS_CKM.4": 6,
          "FCS_CKM.4.1": 1,
          "FCS_COP": 20,
          "FCS_COP.1": 4,
          "FCS_RBG_EXT.1": 5,
          "FCS_RBG_EXT.1.1": 1,
          "FCS_RBG_EXT.1.2": 1,
          "FCS_SSHS_EXT.1": 6,
          "FCS_SSHS_EXT.1.1": 1,
          "FCS_SSHS_EXT.1.3": 1,
          "FCS_SSH_EXT.1": 10,
          "FCS_SSH_EXT.1.1": 2,
          "FCS_SSH_EXT.1.2": 1,
          "FCS_SSH_EXT.1.3": 1,
          "FCS_SSH_EXT.1.4": 1,
          "FCS_SSH_EXT.1.5": 1,
          "FCS_SSH_EXT.1.6": 1,
          "FCS_SSH_EXT.1.7": 1,
          "FCS_SSH_EXT.1.8": 1,
          "FCS_TLSC_EXT": 2,
          "FCS_TLSC_EXT.1": 9,
          "FCS_TLSC_EXT.1.1": 2,
          "FCS_TLSC_EXT.1.2": 1,
          "FCS_TLSC_EXT.1.3": 1,
          "FCS_TLSC_EXT.1.4": 1,
          "FCS_TLSC_EXT.1.5": 1,
          "FCS_TLSC_EXT.1.6": 1,
          "FCS_TLSC_EXT.1.7": 1,
          "FCS_TLSC_EXT.1.8": 1,
          "FCS_TLSC_EXT.1.9": 1
        },
        "FIA": {
          "FIA_AFL.1": 7,
          "FIA_AFL.1.1": 1,
          "FIA_AFL.1.2": 1,
          "FIA_PMG_EXT.1": 5,
          "FIA_PMG_EXT.1.1": 1,
          "FIA_PSK_EXT.1": 1,
          "FIA_UAU.7": 5,
          "FIA_UAU.7.1": 1,
          "FIA_UAU_EXT.2": 2,
          "FIA_UIA_EXT.1": 7,
          "FIA_UIA_EXT.1.1": 1,
          "FIA_UIA_EXT.1.2": 1,
          "FIA_UIA_EXT.1.3": 3,
          "FIA_UIA_EXT.1.4": 1
        },
        "FMT": {
          "FMT_MOF": 9,
          "FMT_MOF.1": 2,
          "FMT_MTD": 9,
          "FMT_MTD.1": 2,
          "FMT_SMF.1": 6,
          "FMT_SMF.1.1": 1,
          "FMT_SMR.2": 5,
          "FMT_SMR.2.1": 1,
          "FMT_SMR.2.2": 1,
          "FMT_SMR.2.3": 1
        },
        "FPT": {
          "FPT_APW_EXT.1": 5,
          "FPT_APW_EXT.1.1": 1,
          "FPT_APW_EXT.1.2": 1,
          "FPT_SKP_EXT": 2,
          "FPT_SKP_EXT.1": 3,
          "FPT_SKP_EXT.1.1": 1,
          "FPT_STM_EXT.1": 6,
          "FPT_STM_EXT.1.1": 1,
          "FPT_STM_EXT.1.2": 1,
          "FPT_TST_EXT": 2,
          "FPT_TST_EXT.1": 4,
          "FPT_TST_EXT.1.1": 1,
          "FPT_TST_EXT.1.2": 1,
          "FPT_TUD_EXT.1": 5,
          "FPT_TUD_EXT.1.1": 1,
          "FPT_TUD_EXT.1.2": 1,
          "FPT_TUD_EXT.1.3": 1
        },
        "FTA": {
          "FTA_SSL.3": 6,
          "FTA_SSL.4": 5,
          "FTA_SSL.4.1": 1,
          "FTA_SSL_EXT.1": 5,
          "FTA_SSL_EXT.1.1": 1,
          "FTA_TAB.1": 6,
          "FTA_TAB.1.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 6,
          "FTP_ITC.1.1": 1,
          "FTP_ITC.1.2": 1,
          "FTP_TRP": 3,
          "FTP_TRP.1": 5
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "CTR": {
          "CTR": 4
        },
        "GCM": {
          "GCM": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 1
        },
        "IPsec": {
          "IPsec": 3
        },
        "SSH": {
          "SSH": 64,
          "SSHv2": 24
        },
        "TLS": {
          "SSL": {
            "SSL 2.0": 1,
            "SSL 3.0": 1
          },
          "TLS": {
            "TLS": 45,
            "TLS 1.0": 1,
            "TLS 1.1": 1,
            "TLS 1.2": 3,
            "TLSv1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 12,
          "P-384": 6,
          "P-521": 12,
          "secp256r1": 2,
          "secp384r1": 2,
          "secp521r1": 2
        }
      },
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 3,
            "SHA-384": 2,
            "SHA-512": 3,
            "SHA256": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 1,
          "RNG": 4
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2017-04-001": 1,
          "CCMB-2017-04-002": 1,
          "CCMB-2017-04-003": 1
        },
        "FIPS": {
          "FIPS 140-3": 5,
          "FIPS 186-4": 1,
          "FIPS PUB 140-3": 1,
          "FIPS PUB 180-3": 2,
          "FIPS PUB 186-3": 2,
          "FIPS PUB 186-4": 17,
          "FIPS PUB 186-5": 6,
          "FIPS PUB 198-1": 1
        },
        "ISO": {
          "ISO/IEC 14888-3": 2,
          "ISO/IEC 15408": 2,
          "ISO/IEC 18031:2011": 2,
          "ISO/IEC 9796-2": 1
        },
        "NIST": {
          "NIST SP 800-186": 1,
          "NIST SP 800-56B": 2,
          "NIST SP 800-90A": 2
        },
        "PKCS": {
          "PKCS #1": 2
        },
        "RFC": {
          "RFC 3268": 6,
          "RFC 3447": 1,
          "RFC 3526": 1,
          "RFC 4252": 3,
          "RFC 4253": 3,
          "RFC 4344": 2,
          "RFC 4492": 4,
          "RFC 5246": 9,
          "RFC 5280": 4,
          "RFC 5288": 8,
          "RFC 5289": 16,
          "RFC 5647": 2,
          "RFC 5656": 11,
          "RFC 6125": 1,
          "RFC 6668": 2,
          "RFC 6960": 1,
          "RFC 8332": 2,
          "RFC 8446": 1
        },
        "X509": {
          "X.509": 6
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 16
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 7,
            "HMAC-SHA-256": 2,
            "HMAC-SHA-512": 2
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 2,
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 2,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 2,
          "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 2,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 2,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 2,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 2,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 2,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 2,
          "TLS_RSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_RSA_WITH_AES_128_GCM_SHA256": 2,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 2,
          "TLS_RSA_WITH_AES_256_GCM_SHA384": 2
        }
      },
      "vendor": {
        "Cisco": {
          "Cisco": 54,
          "Cisco Systems": 13,
          "Cisco Systems, Inc": 2
        }
      },
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "Cisco SRE",
      "/CreationDate": "D:20251203161529+01\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word LTSC",
      "/ModDate": "D:20251203161529+01\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word LTSC",
      "/Title": "Cisco MDS 9000 Series Switches Security Target",
      "pdf_file_size_bytes": 1155556,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.cisco.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 83
    }
  },
  "protection_profile_links": null,
  "report_link": "https://certification.enisa.europa.eu/document/download/3a69c15b-7f04-4ceb-b9b3-3c579db35289_en?filename=EUCC-3110-2025-12-2500098-01%20Certification%20Report%20v2.pdf",
  "scheme": "NL",
  "security_level": {
    "_type": "Set",
    "elements": [
      "EAL1"
    ]
  },
  "st_link": "https://certification.enisa.europa.eu/document/download/9cd8163b-d784-4ba2-9206-b7b7fb69c273_en?filename=EUCC-3110-2025-12-2500098-01%20Security%20target.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "8b93982c45f36fbc0d00b19d853defbfd17ea6ab05e44d4062b01f8418f6cc55",
      "txt_hash": "b926c629aa01521de0b753dd59ec65eee0c4c7b1cdd1b8d45bfaaf226a11feb3"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "9c0c18e01053d1c8be18aa00c79e4b1ed308d2090770856b756254e3b4f2f0ee",
      "txt_hash": "b7552db14242aa1170193823ff1d0a7b88dcc03cf204ab7005612dc64a35a1f3"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "26ef6eccdf04bb2366473daa1e5648a1a18bef6b797d6913986d2f22fa8a591c",
      "txt_hash": "acfdc77ae1cb58a2bc33a6e05e63b0184b983d1cb4d8810095934c631a4b340d"
    }
  },
  "status": "active"
}

Sections

Cisco Nexus 9000 Series Switches, software version Cisco NX-OS version 10.4(5)(M)

Known vulnerabilities detected

Webpage information

Product Specification

Certificate holder

Certification body

Standards & Compliance

Other

Certificate

Extracted keywords

Device

Vendor

Common Criteria

Security Assurance Requirements (SAR)

Evaluation facilities

Other

Standards

File metadata

Certification report

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Schemes

Protocols

Randomness

Block cipher modes

Device

Vendor

Common Criteria

Security level

Security Assurance Requirements (SAR)

Evaluation facilities

Security

Certification process

Other

Standards

File metadata

Frontpage

Security target

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Device

Vendor

Common Criteria

Claims

Security Assurance Requirements (SAR)

Security Functional Requirements (SFR)

Certificates

Other

Standards

File metadata

Heuristics

Automated inference - use with caution

Extracted SARs

CPE matches

Related CVEs

Updates Feed

Raw data

Toggle raw data