Cisco NX-OS Command Injection Vulnerability

Details

Vendor

Cisco

Product

Cisco NX-OS

CVE

CVE-2024-20399

Affected versions

Cisco NX-OS Software 8.2: 12 versions, from 8.2(5) to 8.2(11)
Cisco NX-OS Software 7.3: 43 versions, from 7.3(6)N1(1a) to 7.3(14)N1(1)
Cisco NX-OS Software 8.4: 18 versions, from 8.4(2) to 8.4(9)
Cisco NX-OS Software 6.2: 50 versions, from 6.2(2) to 6.2(24a)
Cisco NX-OS Software 9.2: 8 versions, from 9.2(3) to 9.2(1a)
Cisco NX-OS Software 7.0: 54 versions, from 7.0(3)I5(2) to 7.0(3)I7(10)
Cisco NX-OS Software 6.0: 49 versions, from 6.0(2)A8(7a) to 6.0(2)U6(10a)
Cisco NX-OS Software 7.1: 19 versions, from 7.1(5)N1(1b) to 7.1(4)N1(1)
Cisco NX-OS Software 9.3: 18 versions, from 9.3(2) to 9.3(13)
Cisco NX-OS Software 8.1: 5 versions, from 8.1(1) to 8.1(1a)
Cisco NX-OS Software 7.2: 6 versions, from 7.2(2)D1(2) to 7.2(0)D1(1)
Cisco NX-OS Software 8.3: 8.3(2); 8.3(1)
Cisco NX-OS Software 8.0: 8.0(1)
Cisco NX-OS Software 8.5: 8.5(1)
Cisco NX-OS Software 10.1: 10.1(2); 10.1(1)
Cisco NX-OS Software 10.2: 10 versions, from 10.2(1) to 10.2(8)
Cisco NX-OS Software 10.3: 15 versions, from 10.3(1) to 10.3(3r)
Cisco NX-OS Software 9.4: 9.4(1); 9.4(1a); 9.4(2)
Cisco NX-OS Software 10.4: 10.4(1); 10.4(2) (from the advisory and NVD; check the exact builds in the official advisory)

CVSS score

6

Actively exploited

Yes, listed in the CISA Known Exploited Vulnerabilities catalog

CISA due date

July 23, 2024 (deadline for US federal agencies: a good benchmark for you too)

Source

CISA KEV – original advisory

Published

July 2, 2024

The description and the recommended action are quoted from the public advisory; severity, exploitation status and affected versions are compiled automatically from public sources and may contain errors. The vendor's original advisory prevails: check it before taking action. This information is provided without warranty and does not replace a professional assessment.