CVE-2017-12336

CVE-2017-12336 is a vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software, affecting numerous Nexus series switches and Unified Computing System Manager. An authenticated, local attacker with administrative or tclsh privileges can exploit insufficient input validation to escape the interactive TCL shell. This allows them to execute arbitrary commands on the underlying operating system. Rated Medium severity (CVSS 4.2), the vulnerability has a low attack complexity but requires high privileges and local access, resulting in low impact on confidentiality, integrity, and availability. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.