Cisco NX-OS Software Command Injection Vulnerability

4.4 CVSS

Vulnerability Description

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device.  This vulnerability is due to insufficient validation of arguments for a specific CLI command. An attacker could exploit this vulnerability by including crafted input as the argument of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-20289

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmdinj-Lq6jsZhH

More from Cisco

View All →

CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Critical 10

CVE-2025-20377

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Medium 4.3

CVE-2025-20376

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Medium 6.5

CVE-2025-20375

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Medium 6.5

CVE-2025-20374

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco NX-OS Software, Cisco NX-OS System Software in ACI Mode

Vulnerable Versions:

9.3(3), 9.3(4), 9.3(5), 9.3(6), 10.1(2), 10.1(1), 9.3(5w), 9.3(7), 9.3(7k), 10.2(1), 9.3(7a), 9.3(8), 10.2(1q), 10.2(2), 9.3(9), 10.1(2t), 10.2(3), 10.2(3t), 9.3(10), 10.2(2a), 10.3(1), 10.2(4), 10.3(2), 9.3(11), 10.3(3), 10.2(5), 9.3(12), 10.2(3v), 10.4(1), 10.3(99w), 10.2(6), 10.3(3w), 10.3(99x), 10.3(3o), 10.3(4), 10.3(3p), 10.3(4a), 10.4(2), 10.3(3q), 10.3(3x), 10.3(4g), 10.3(3r), 16.0(2h), 16.0(2j), 16.0(3d), 16.0(3e), 16.0(4c), 16.0(5h), 16.0(3g), 16.0(5j)