CVE-2020-3454

CVE-2020-3454 is a high-severity command injection vulnerability affecting the Call Home feature in Cisco NX-OS Software. An authenticated, remote attacker can exploit insufficient input validation in HTTP-configured Call Home parameters to execute arbitrary commands with root privileges on the underlying operating system. The CVSS score is 7.2 (HIGH), indicating a network attack vector with low complexity and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation is reported, there is some community discussion and media coverage surrounding this vulnerability.