CVE-2022-20650

Cisco NX-OS Software NX-API Command Injection Vulnerability

HIGH

8.8

CVSS Score

Published: February 23, 2022 at 05:40 PM UTC

Updated: June 17, 2026 at 04:24 AM UTC

66 products affected across 1 vendorNx OSNexus 93120TxNexus 93108Tc-Ex

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 15%

SSVC

No known exploit

Description

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP POST request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system. Note: The NX-API feature is disabled by default.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

10.2(1.72)7.3(8)n1(0.4)

cisco-n9k-c9316d-gx (environment) · cisco-n9k-c9332d-gx2b (environment) · cisco-n9k-c9348d-gx2a (environment) · cisco-n9k-c93600cd-gx (environment) · cisco-n9k-c9364d-gx2a (environment) · cisco-nexus-3048 (environment) · cisco-nexus-31108pc-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132c-z (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3132q-x (environment) · cisco-nexus-3132q-xl (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172pq (environment) · cisco-nexus-3172pq-xl (environment) · cisco-nexus-3172tq-xl (environment) · cisco-nexus-3232c (environment) · cisco-nexus-3264c-e (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3408-s (environment) · cisco-nexus-34180yc (environment) · cisco-nexus-3432d-s (environment) · cisco-nexus-3464c (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-3636c-r (environment) · cisco-nexus-5548p (environment) · cisco-nexus-5548up (environment) · cisco-nexus-5596t (environment) · cisco-nexus-5596up (environment) · cisco-nexus-56128p (environment) · cisco-nexus-5672up (environment) · cisco-nexus-5672up-16g (environment) · cisco-nexus-6000 (environment) · cisco-nexus-6001 (environment) · cisco-nexus-6004 (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93108tc-fx3p (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93180yc-fx3 (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336c-fx2-e (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9364c-gx (environment) · cisco-nexus-9504-switch (environment) · cisco-nexus-9508-switch (environment) · cisco-nexus-9516-switch (environment)

N9K-C9316D-Gx · Ciscodevice

80%

All versions

N9K-C9332D-Gx2B · Ciscodevice

80%

All versions

N9K-C9348D-Gx2A · Ciscodevice

80%

All versions

N9K-C93600Cd-Gx · Ciscodevice

80%

All versions