CVE-2017-6650

N/A

Published: May 22, 2017 at 01:00 AM UTC

Updated: June 17, 2026 at 01:22 AM UTC

10 products affected across 1 vendorNx OSNexus 5596UPNexus 5548UP

Using Cisco Nexus Series Switches by N/A?

Get instant alerts when new vulnerabilities affect Cisco Nexus Series Switches - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.9%

Description

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into the Telnet CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86771.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

7.1(1)n1(1)7.1(2)n1(1)7.1(3)n1(1)7.1(3)n1(2)7.1(3)n1(2.1)7.1(3)n1(3.12)7.1(4)n1(1)7.2(0)d1(0.437)7.2(0)n1(1)7.2(0)zz(99.1)7.2(1)n1(1)7.3(0)n1(1)

cisco-nexus-5548up (environment) · cisco-nexus-5596t (environment) · cisco-nexus-5596up (environment) · cisco-nexus-56128p (environment) · cisco-nexus-5624q (environment) · cisco-nexus-5648q (environment) · cisco-nexus-5672up (environment) · cisco-nexus-5672up-16g (environment) · cisco-nexus-5696q (environment)

Nexus 5548UP · Ciscodevice

80%

All versions

Nexus 5596T · Ciscodevice

80%

All versions

Nexus 5596UP · Ciscodevice

80%

All versions

Nexus 56128P · Ciscodevice

80%

All versions