CVE-2017-6649

N/A

Published: May 22, 2017 at 01:00 AM UTC

Updated: June 17, 2026 at 01:22 AM UTC

10 products affected across 1 vendorNx OSNexus 5596UPNexus 5548UP

Using Cisco Nexus Series Switches by N/A?

Get instant alerts when new vulnerabilities affect Cisco Nexus Series Switches - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.9%

Description

A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86787, CSCve60516, CSCve60555.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

7.1(1)n1(1)7.1(2)n1(1)7.1(3)n1(1)7.1(3)n1(2)7.1(3)n1(2.1)7.1(3)n1(3.12)7.1(4)n1(1)7.2(0)d1(0.437)7.2(0)n1(1)7.2(0)zz(99.1)7.2(1)n1(1)7.3(0)n1(1)

cisco-nexus-5548up (environment) · cisco-nexus-5596t (environment) · cisco-nexus-5596up (environment) · cisco-nexus-56128p (environment) · cisco-nexus-5624q (environment) · cisco-nexus-5648q (environment) · cisco-nexus-5672up (environment) · cisco-nexus-5672up-16g (environment) · cisco-nexus-5696q (environment)

Nexus 5548UP · Ciscodevice

80%

All versions

Nexus 5596T · Ciscodevice

80%

All versions

Nexus 5596UP · Ciscodevice

80%

All versions

Nexus 56128P · Ciscodevice

80%

All versions