CVE-2017-12341 is a command injection vulnerability in the CLI of Cisco NX-OS System Software, affecting various Cisco Nexus and Multilayer Director Switches, as well as Unified Computing System Manager. An authenticated, local attacker with administrator credentials could exploit this by installing a crafted patch image, leading to arbitrary command execution as root. With a CVSS score of 6.7 (MEDIUM), this vulnerability requires high privileges and local access, but allows for full compromise of confidentiality, integrity, and availability. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed on the KEV catalog, indicating no active exploitation. Community discussion and media coverage are also minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.0\(0\)hsk\(0.357\)CPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:7.0\(0\)hsk\(0.357\):*:*:*:*:*:*:* | ||
8.1\(0.59\)s0CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:8.1\(0.59\)s0:*:*:*:*:*:*:* | ||
8.1\(1\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:8.1\(1\):*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.