Lucene search

[email protected]CVE-2023-20050

HistoryFeb 23, 2023 - 8:15 p.m.

CVE-2023-20050

2023-02-2320:15:13

CWE-78

[email protected]

web.nvd.nist.gov

cve-2023-20050

cisco

nx-os software

vulnerability

cli

arbitrary commands

nvd

security

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.2%

JSON

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.

Affected configurations

NVD

Node

cisconx-osMatch-

AND

ciscomds_9000Match-

ciscomds_9100Match-

ciscomds_9132tMatch-

ciscomds_9134Match-

ciscomds_9140Match-

ciscomds_9148Match-

ciscomds_9148sMatch-

ciscomds_9148tMatch-

ciscomds_9200Match-

ciscomds_9216Match-

ciscomds_9216aMatch-

ciscomds_9216iMatch-

ciscomds_9222iMatch-

ciscomds_9250iMatch-

ciscomds_9396sMatch-

ciscomds_9396tMatch-

ciscomds_9500Match-

ciscomds_9506Match-

ciscomds_9509Match-

ciscomds_9513Match-

ciscomds_9700Match-

ciscomds_9706Match-

ciscomds_9710Match-

ciscomds_9718Match-

cisconexus_1000_virtual_edgeMatch-vmware_vsphere

cisconexus_1000vMatch-hyper-v

cisconexus_1000vMatch-microsoft_hyper-v

cisconexus_5500Match-

cisconexus_5548pMatch-

cisconexus_5548upMatch-

cisconexus_5596tMatch-

cisconexus_5596upMatch-

cisconexus_5600Match-

cisconexus_56128pMatch-

cisconexus_5624qMatch-

cisconexus_5648qMatch-

cisconexus_5672upMatch-

cisconexus_5672up-16gMatch-

cisconexus_5696qMatch-

cisconexus_6000Match-

cisconexus_6001Match-

cisconexus_6001pMatch-

cisconexus_6001tMatch-

cisconexus_6004Match-

cisconexus_6004xMatch-

Node

cisconx-osRange<8.2\(9\)

AND

cisconexus_7000Match-

cisconexus_7004Match-

cisconexus_7009Match-

cisconexus_7010Match-

cisconexus_7018Match-

cisconexus_7700Match-

cisconexus_7702Match-

cisconexus_7706Match-

cisconexus_7710Match-

cisconexus_7718Match-

Node

cisconx-osRange<9.3\(10\)

AND

cisconexus_3016Match-

cisconexus_3016qMatch-

cisconexus_3048Match-

cisconexus_3064Match-

cisconexus_3064-32tMatch-

cisconexus_3064-tMatch-

cisconexus_3064-xMatch-

cisconexus_3064tMatch-

cisconexus_3064xMatch-

cisconexus_3100Match-

cisconexus_3100-vMatch-

cisconexus_3100-zMatch-

cisconexus_3100vMatch-

cisconexus_31108pc-vMatch-

cisconexus_31108pv-vMatch-

cisconexus_31108tc-vMatch-

cisconexus_31128pqMatch-

cisconexus_3132c-zMatch-

cisconexus_3132qMatch-

cisconexus_3132q-vMatch-

cisconexus_3132q-xMatch-

cisconexus_3132q-x\/3132q-xlMatch-

cisconexus_3132q-xlMatch-

cisconexus_3164qMatch-

cisconexus_3172Match-

cisconexus_3172pqMatch-

cisconexus_3172pq-xlMatch-

cisconexus_3172pq\/pq-xlMatch-

cisconexus_3172tqMatch-

cisconexus_3172tq-32tMatch-

cisconexus_3172tq-xlMatch-

cisconexus_3200Match-

cisconexus_3232cMatch-

cisconexus_3232c_Match-

cisconexus_3264c-eMatch-

cisconexus_3264qMatch-

cisconexus_3400Match-

cisconexus_3408-sMatch-

cisconexus_34180ycMatch-

cisconexus_34200yc-smMatch-

cisconexus_3432d-sMatch-

cisconexus_3464cMatch-

cisconexus_3500Match-

cisconexus_3524Match-

cisconexus_3524-xMatch-

cisconexus_3524-x\/xlMatch-

cisconexus_3524-xlMatch-

cisconexus_3548Match-

cisconexus_3548-xMatch-

cisconexus_3548-x\/xlMatch-

cisconexus_3548-xlMatch-

cisconexus_3600Match-

cisconexus_36180yc-rMatch-

cisconexus_3636c-rMatch-

cisconexus_9000Match-

cisconexus_9000vMatch-

Node

cisconx-osRange<10.2\(4\)

AND

cisconexus_3016Match-

cisconexus_3016qMatch-

cisconexus_3048Match-

cisconexus_3064Match-

cisconexus_3064-32tMatch-

cisconexus_3064-tMatch-

cisconexus_3064-xMatch-

cisconexus_3064tMatch-

cisconexus_3064xMatch-

cisconexus_3100Match-

cisconexus_3100-vMatch-

cisconexus_3100-zMatch-

cisconexus_3100vMatch-

cisconexus_31108pc-vMatch-

cisconexus_31108pv-vMatch-

cisconexus_31108tc-vMatch-

cisconexus_31128pqMatch-

cisconexus_3132c-zMatch-

cisconexus_3132qMatch-

cisconexus_3132q-vMatch-

cisconexus_3132q-xMatch-

cisconexus_3132q-x\/3132q-xlMatch-

cisconexus_3132q-xlMatch-

cisconexus_3164qMatch-

cisconexus_3172Match-

cisconexus_3172pqMatch-

cisconexus_3172pq-xlMatch-

cisconexus_3172pq\/pq-xlMatch-

cisconexus_3172tqMatch-

cisconexus_3172tq-32tMatch-

cisconexus_3172tq-xlMatch-

cisconexus_3200Match-

cisconexus_3232cMatch-

cisconexus_3232c_Match-

cisconexus_3264c-eMatch-

cisconexus_3264qMatch-

cisconexus_3400Match-

cisconexus_3408-sMatch-

cisconexus_34180ycMatch-

cisconexus_34200yc-smMatch-

cisconexus_3432d-sMatch-

cisconexus_3464cMatch-

cisconexus_3500Match-

cisconexus_3524Match-

cisconexus_3524-xMatch-

cisconexus_3524-x\/xlMatch-

cisconexus_3524-xlMatch-

cisconexus_3548Match-

cisconexus_3548-xMatch-

cisconexus_3548-x\/xlMatch-

cisconexus_3548-xlMatch-

cisconexus_3600Match-

cisconexus_36180yc-rMatch-

cisconexus_3636c-rMatch-

cisconexus_9000Match-

cisconexus_9000vMatch-

CPENameOperatorVersion
cisco:nx-oscisco nx-oseq-

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	eq	-

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco NX-OS Software ",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]