Vulnslist

find the latest Cisco vulnerabilities

CVE-2023-20050

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.

SeverityMEDIUM
CVSS4.4
CWECWE-78
KEV
Published
Modified

Related Products

Product Advisory
Cisco Nexus Dashboard cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco MDS 9000 Family of Multilayer Switches cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Firepower Extensible Operating System (FXOS) cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Catalyst PON Series Switches cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Nexus 9000 Series Switches cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Nexus 7000 Series Switches cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Nexus 6000 Series Switches cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Nexus 5000 Series Switches cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Nexus 3000 Series Switches cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco Nexus 3000 Series Switch cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco NX-OS Software cisco-sa-nxos-cli-cmdinject-euQVK9u
Cisco MDS 9000 Multilayer Directors and Fabric Switches cisco-sa-nxos-cli-cmdinject-euQVK9u