CVE-2025-20161
5.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
Summary
A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker with valid Administrator credentials to execute a command injection attack on the underlying operating system of an affected device.
This vulnerability is due to insufficient validation of specific elements within a software image. An attacker could exploit this vulnerability by installing a crafted image. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. Note: Administrators should validate the hash of any software image before installation.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco NX-OS Software | 9.2(3) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(2) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(7a) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(5) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(6) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(3) | affected |
| Cisco | Cisco NX-OS Software | 9.2(2v) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(7) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(1) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(2) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(11) | affected |
| Cisco | Cisco NX-OS Software | 9.2(1) | affected |
| Cisco | Cisco NX-OS Software | 9.2(2t) | affected |
| Cisco | Cisco NX-OS Software | 9.2(3y) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(1t) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(6z) | affected |
| Cisco | Cisco NX-OS Software | 9.3(2) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(3) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(3z) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)IM7(2) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(11b) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(5a) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I6(1) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(3b) | affected |
| Cisco | Cisco NX-OS Software | 9.2(4) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(10) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(2) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)IC4(4) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(3c) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(1) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(5) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(2) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(3) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(3) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(6) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I6(2) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(5) | affected |
| Cisco | Cisco NX-OS Software | 9.3(1) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(7) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(6) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(11a) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8z) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(9) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(4) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(7) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(9) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(1) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(10a) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(1) | affected |
| Cisco | Cisco NX-OS Software | 9.3(1z) | affected |
| Cisco | Cisco NX-OS Software | 9.2(2) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(4) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8b) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(3) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(6t) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(3a) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(8) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(5) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(3a) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(4) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8a) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(2) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(4) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(1) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)IA7(2) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)IA7(1) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(7b) | affected |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(4a) | affected |
| Cisco | Cisco NX-OS Software | 9.3(3) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(8) | affected |
| Cisco | Cisco NX-OS Software | 9.3(4) | affected |
| Cisco | Cisco NX-OS Software | 9.3(5) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(9) | affected |
| Cisco | Cisco NX-OS Software | 9.3(6) | affected |
| Cisco | Cisco NX-OS Software | 10.1(2) | affected |
| Cisco | Cisco NX-OS Software | 10.1(1) | affected |
| Cisco | Cisco NX-OS Software | 9.3(5w) | affected |
| Cisco | Cisco NX-OS Software | 9.3(7) | affected |
| Cisco | Cisco NX-OS Software | 9.3(7k) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(9w) | affected |
| Cisco | Cisco NX-OS Software | 10.2(1) | affected |
| Cisco | Cisco NX-OS Software | 9.3(7a) | affected |
| Cisco | Cisco NX-OS Software | 9.3(8) | affected |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(10) | affected |
| Cisco | Cisco NX-OS Software | 10.2(1q) | affected |
| Cisco | Cisco NX-OS Software | 10.2(2) | affected |
| Cisco | Cisco NX-OS Software | 9.3(9) | affected |
| Cisco | Cisco NX-OS Software | 10.1(2t) | affected |
| Cisco | Cisco NX-OS Software | 10.2(3) | affected |
| Cisco | Cisco NX-OS Software | 10.2(3t) | affected |
| Cisco | Cisco NX-OS Software | 9.3(10) | affected |
| Cisco | Cisco NX-OS Software | 10.2(2a) | affected |
| Cisco | Cisco NX-OS Software | 10.3(1) | affected |
| Cisco | Cisco NX-OS Software | 10.2(4) | affected |
| Cisco | Cisco NX-OS Software | 10.3(2) | affected |
| Cisco | Cisco NX-OS Software | 9.3(11) | affected |
| Cisco | Cisco NX-OS Software | 10.3(3) | affected |
| Cisco | Cisco NX-OS Software | 10.2(5) | affected |
| Cisco | Cisco NX-OS Software | 9.3(12) | affected |
| Cisco | Cisco NX-OS Software | 10.2(3v) | affected |
| Cisco | Cisco NX-OS Software | 10.4(1) | affected |
| Cisco | Cisco NX-OS Software | 10.3(99w) | affected |
| Cisco | Cisco NX-OS Software | 10.2(6) | affected |
| Cisco | Cisco NX-OS Software | 10.3(3w) | affected |
| Cisco | Cisco NX-OS Software | 10.3(99x) | affected |
| Cisco | Cisco NX-OS Software | 10.3(3o) | affected |
| Cisco | Cisco NX-OS Software | 10.3(4) | affected |
| Cisco | Cisco NX-OS Software | 10.3(3p) | affected |
| Cisco | Cisco NX-OS Software | 10.3(4a) | affected |
| Cisco | Cisco NX-OS Software | 10.4(2) | affected |
| Cisco | Cisco NX-OS Software | 10.3(3q) | affected |
| Cisco | Cisco NX-OS Software | 9.3(13) | affected |
| Cisco | Cisco NX-OS Software | 10.3(5) | affected |
| Cisco | Cisco NX-OS Software | 10.2(7) | affected |
| Cisco | Cisco NX-OS Software | 10.4(3) | affected |
| Cisco | Cisco NX-OS Software | 10.3(3x) | affected |
| Cisco | Cisco NX-OS Software | 10.3(4g) | affected |
| Cisco | Cisco NX-OS Software | 10.5(1) | affected |
| Cisco | Cisco NX-OS Software | 10.2(8) | affected |
| Cisco | Cisco NX-OS Software | 10.3(3r) | affected |
| Cisco | Cisco NX-OS Software | 10.3(6) | affected |
| Cisco | Cisco NX-OS Software | 9.3(14) | affected |
| Cisco | Cisco NX-OS Software | 10.3(4h) | affected |
Weaknesses
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.