CVE-2017-12330

CVE-2017-12330 describes a command injection vulnerability in the Cisco NX-OS System Software CLI, affecting numerous Nexus and Multilayer Director Switches. This flaw, stemming from insufficient input validation, allows an authenticated local attacker to execute arbitrary commands at their privilege level, potentially outside their virtual device context. Rated Medium severity (CVSS 6.3), the vulnerability requires local access but has low attack complexity, leading to potential impacts on confidentiality, integrity, and availability. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.