Command Injection Vulnerability in Cisco Nexus Series Switches

CVE-2017-6650

Summary

The Telnet CLI command in Cisco NX-OS System Software versions 7.1 to 7.3 for Cisco Nexus Series Switches is susceptible to a command injection vulnerability. This issue arises from inadequate input validation of command arguments, permitting an authenticated local attacker to execute arbitrary commands. By manipulating command arguments within the Telnet CLI, attackers can potentially gain the ability to read or write arbitrary files with the user's privileges. Effective remediation is essential to address this security weakness.

References