CVE-2021-1361

CVE-2021-1361 describes a critical vulnerability in Cisco Nexus 3000 and 9000 Series Switches running standalone NX-OS, where an internal file management service incorrectly listens on TCP port 9075. This allows unauthenticated, remote attackers to create, delete, or overwrite arbitrary files with root privileges. With a CVSS score of 9.1 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full device compromise, including unauthorized user account creation. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.