CVE-2017-6649

Published: May 22, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86787, CSCve60516, CSCve60555.

Affected (12)

Products: Cisco: Nx Os

Cisco

1 product

Nx Os

Configuration A

12 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 7.1(1)n1(1)
Cisco Nx Os	Version 7.1(2)n1(1)
Cisco Nx Os	Version 7.1(3)n1(1)
Cisco Nx Os	Version 7.1(3)n1(2.1)
Cisco Nx Os	Version 7.1(3)n1(2)
Cisco Nx Os	Version 7.1(3)n1(3.12)
Cisco Nx Os	Version 7.1(4)n1(1)
Cisco Nx Os	Version 7.2(0)d1(0.437)
Cisco Nx Os	Version 7.2(0)n1(1)
Cisco Nx Os	Version 7.2(0)zz(99.1)
Cisco Nx Os	Version 7.2(1)n1(1)
Cisco Nx Os	Version 7.3(0)n1(1)

Running on/with	Platform Versions
Cisco Nexus 5548up	All versions
Cisco Nexus 5596t	All versions
Cisco Nexus 5596up	All versions
Cisco Nexus 56128p	All versions
Cisco Nexus 5624q	All versions
Cisco Nexus 5648q	All versions
Cisco Nexus 5672up	All versions
Cisco Nexus 5672up 16g	All versions
Cisco Nexus 5696q	All versions