CVE-2021-1361

Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability

CRITICAL

9.1

CVSS Score

Published: February 24, 2021 at 07:30 PM UTC

Updated: June 17, 2026 at 03:31 AM UTC

49 products affected across 1 vendorNx OSNexus 9508Nexus 93120Tx

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.1

Exploit prediction

EPSS 2%

SSVC

No known exploit

Description

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite arbitrary files with root privileges on the device. This vulnerability exists because TCP port 9075 is incorrectly configured to listen and respond to external connection requests. An attacker could exploit this vulnerability by sending crafted TCP packets to an IP address that is configured on a local interface on TCP port 9075. A successful exploit could allow the attacker to create, delete, or overwrite arbitrary files, including sensitive files that are related to the device configuration. For example, the attacker could add a user account without the device administrator knowing.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

9.3(5)9.3(6)

cisco-nexus-3000 (environment) · cisco-nexus-3100 (environment) · cisco-nexus-3100-z (environment) · cisco-nexus-3100v (environment) · cisco-nexus-3200 (environment) · cisco-nexus-3400 (environment) · cisco-nexus-3500 (environment) · cisco-nexus-3600 (environment) · cisco-nexus-9000v (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-ex-24 (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93108tc-fx-24 (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-9316d-gx (environment) · cisco-nexus-93180lc-ex (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-ex-24 (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93180yc-fx-24 (environment) · cisco-nexus-93180yc-fx3 (environment) · cisco-nexus-93180yc-fx3s (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336c-fx2-e (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-93600cd-gx (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9364c-gx (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372px-e (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9372tx-e (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9508 (environment)

Nexus 3000 · Ciscodevice

80%

All versions

Nexus 3100 · Ciscodevice

80%

All versions

Nexus 3100-Z · Ciscodevice

80%

All versions

Nexus 3100V · Ciscodevice

80%

All versions