CVE-2017-12338 is a medium-severity vulnerability in the Cisco NX-OS System Software CLI, affecting numerous Cisco Nexus and Multilayer Director Switches, as well as Unified Computing System Manager. An authenticated, local attacker can exploit insufficient input validation in a specific CLI command to read arbitrary files on the underlying file system, including across virtual device contexts. While the CVSS score is 6.0, indicating high confidentiality impact, there is no known public exploit code (Metasploit, Nuclei, ExploitDB) and no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.0\(1\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:8.0\(1\):*:*:*:*:*:*:* | ||
8.1\(0\)bd\(0.20\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:8.1\(0\)bd\(0.20\):*:*:*:*:*:*:* | ||
8.1\(1\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:8.1\(1\):*:*:*:*:*:*:* | ||
7.0\(0\)hsk\(0.357\)CPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:7.0\(0\)hsk\(0.357\):*:*:*:*:*:*:* | ||
12.2\(1.107\)CPE matchmatch criteria | cpe:2.3:o:cisco:lan_switch_software:12.2\(1.107\):*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.