Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco NX-OS Telnet lets logged-in user alter files

CVE-2017-6650 · published 9 years ago
Summary

The Telnet command in Cisco NX-OS version 7.1 to 7.3 on Nexus switches does not properly check what you type. A user who is already logged in locally can insert extra commands and read or change any file they want. Apply the Cisco update that fixes the issue or restrict Telnet access until it is patched.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco nx-os 7.1\(1\)n1\(1\)
7.1\(2\)n1\(1\)
7.1\(3\)n1\(1\)
7.1\(3\)n1\(2\)
7.1\(3\)n1\(2.1\)
7.1\(3\)n1\(3.12\)
7.1\(4\)n1\(1\)
7.2\(0\)d1\(0.437\)
7.2\(0\)n1\(1\)
7.2\(0\)zz\(99.1\)
7.2\(1\)n1\(1\)
7.3\(0\)n1\(1\)
cpe:2.3:o:cisco:nx-os:7.1\(1\)n1\(1\):*:*:*:*:*:*:*
Original advisory text
A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command inj...
A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into the Telnet CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86771.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
CWE-77Command Injection
Timeline
Published22 May 2017
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-6650 · NVD
Track software like this
Free during beta