// For flags

CVE-2020-3454

Cisco NX-OS Software Call Home Command Injection Vulnerability

Severity Score

7.2
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track*
*SSVC
Descriptions

A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges on the underlying operating system (OS). The vulnerability is due to insufficient input validation of specific Call Home configuration parameters when the software is configured for transport method HTTP. An attacker could exploit this vulnerability by modifying parameters within the Call Home configuration on an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying OS.

Una vulnerabilidad en la funcionalidad Call Home de Cisco NX-OS Software, podría permitir a un atacante remoto autenticado inyectar comandos arbitrarios que podrían ser ejecutados con privilegios root en el sistema operativo (SO) subyacente. La vulnerabilidad es debido a una comprobación insuficiente de entrada de los parámetros de configuración específicos de Call Home cuando el software está configurado para el método de transporte HTTP. Un atacante podría explotar esta vulnerabilidad mediante la modificación de parámetros dentro de la configuración de Call Home en un dispositivo afectado. Una explotación con éxito podría permitir al atacante ejecutar comandos arbitrarios con privilegios root en el sistema operativo subyacente

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Track*
Exploitation
None
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2019-12-12 CVE Reserved
  • 2020-08-27 CVE Published
  • 2024-10-06 EPSS Updated
  • 2024-11-13 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Mds 9000
Search vendor "Cisco" for product "Mds 9000"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Mds 9100
Search vendor "Cisco" for product "Mds 9100"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Mds 9134
Search vendor "Cisco" for product "Mds 9134"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Mds 9509
Search vendor "Cisco" for product "Mds 9509"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Mds 9710
Search vendor "Cisco" for product "Mds 9710"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3016
Search vendor "Cisco" for product "Nexus 3016"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3048
Search vendor "Cisco" for product "Nexus 3048"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3064
Search vendor "Cisco" for product "Nexus 3064"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3064-t
Search vendor "Cisco" for product "Nexus 3064-t"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 31108pc-v
Search vendor "Cisco" for product "Nexus 31108pc-v"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 31108tc-v
Search vendor "Cisco" for product "Nexus 31108tc-v"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 31128pq
Search vendor "Cisco" for product "Nexus 31128pq"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3132c-z
Search vendor "Cisco" for product "Nexus 3132c-z"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3132q
Search vendor "Cisco" for product "Nexus 3132q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3132q-v
Search vendor "Cisco" for product "Nexus 3132q-v"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3132q-xl
Search vendor "Cisco" for product "Nexus 3132q-xl"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3164q
Search vendor "Cisco" for product "Nexus 3164q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3172
Search vendor "Cisco" for product "Nexus 3172"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3172pq-xl
Search vendor "Cisco" for product "Nexus 3172pq-xl"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3172tq
Search vendor "Cisco" for product "Nexus 3172tq"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3172tq-32t
Search vendor "Cisco" for product "Nexus 3172tq-32t"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3172tq-xl
Search vendor "Cisco" for product "Nexus 3172tq-xl"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3232c
Search vendor "Cisco" for product "Nexus 3232c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3264c-e
Search vendor "Cisco" for product "Nexus 3264c-e"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3264q
Search vendor "Cisco" for product "Nexus 3264q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3408-s
Search vendor "Cisco" for product "Nexus 3408-s"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 34180yc
Search vendor "Cisco" for product "Nexus 34180yc"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3432d-s
Search vendor "Cisco" for product "Nexus 3432d-s"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3464c
Search vendor "Cisco" for product "Nexus 3464c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3524
Search vendor "Cisco" for product "Nexus 3524"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3524-x
Search vendor "Cisco" for product "Nexus 3524-x"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3524-xl
Search vendor "Cisco" for product "Nexus 3524-xl"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3548
Search vendor "Cisco" for product "Nexus 3548"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3548-x
Search vendor "Cisco" for product "Nexus 3548-x"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3548-xl
Search vendor "Cisco" for product "Nexus 3548-xl"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 36180yc-r
Search vendor "Cisco" for product "Nexus 36180yc-r"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 3636c-r
Search vendor "Cisco" for product "Nexus 3636c-r"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5548p
Search vendor "Cisco" for product "Nexus 5548p"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5548up
Search vendor "Cisco" for product "Nexus 5548up"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5596t
Search vendor "Cisco" for product "Nexus 5596t"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5596up
Search vendor "Cisco" for product "Nexus 5596up"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 56128p
Search vendor "Cisco" for product "Nexus 56128p"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5624q
Search vendor "Cisco" for product "Nexus 5624q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5648q
Search vendor "Cisco" for product "Nexus 5648q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5672up
Search vendor "Cisco" for product "Nexus 5672up"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 5696q
Search vendor "Cisco" for product "Nexus 5696q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 6001
Search vendor "Cisco" for product "Nexus 6001"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 6004
Search vendor "Cisco" for product "Nexus 6004"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 7000
Search vendor "Cisco" for product "Nexus 7000"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 7700
Search vendor "Cisco" for product "Nexus 7700"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9000v
Search vendor "Cisco" for product "Nexus 9000v"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 92160yc-x
Search vendor "Cisco" for product "Nexus 92160yc-x"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 92300yc
Search vendor "Cisco" for product "Nexus 92300yc"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 92304qc
Search vendor "Cisco" for product "Nexus 92304qc"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 92348gc-x
Search vendor "Cisco" for product "Nexus 92348gc-x"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9236c
Search vendor "Cisco" for product "Nexus 9236c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9272q
Search vendor "Cisco" for product "Nexus 9272q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93108tc-ex
Search vendor "Cisco" for product "Nexus 93108tc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93108tc-fx
Search vendor "Cisco" for product "Nexus 93108tc-fx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93120tx
Search vendor "Cisco" for product "Nexus 93120tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93128tx
Search vendor "Cisco" for product "Nexus 93128tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180lc-ex
Search vendor "Cisco" for product "Nexus 93180lc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180yc-ex
Search vendor "Cisco" for product "Nexus 93180yc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180yc-fx
Search vendor "Cisco" for product "Nexus 93180yc-fx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93216tc-fx2
Search vendor "Cisco" for product "Nexus 93216tc-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93240yc-fx2
Search vendor "Cisco" for product "Nexus 93240yc-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9332c
Search vendor "Cisco" for product "Nexus 9332c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9332pq
Search vendor "Cisco" for product "Nexus 9332pq"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 93360yc-fx2
Search vendor "Cisco" for product "Nexus 93360yc-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9336c-fx2
Search vendor "Cisco" for product "Nexus 9336c-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9336pq Aci Spine
Search vendor "Cisco" for product "Nexus 9336pq Aci Spine"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9348gc-fxp
Search vendor "Cisco" for product "Nexus 9348gc-fxp"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9364c
Search vendor "Cisco" for product "Nexus 9364c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372px
Search vendor "Cisco" for product "Nexus 9372px"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372px-e
Search vendor "Cisco" for product "Nexus 9372px-e"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372tx
Search vendor "Cisco" for product "Nexus 9372tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372tx-e
Search vendor "Cisco" for product "Nexus 9372tx-e"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9396px
Search vendor "Cisco" for product "Nexus 9396px"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9396tx
Search vendor "Cisco" for product "Nexus 9396tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9504
Search vendor "Cisco" for product "Nexus 9504"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9508
Search vendor "Cisco" for product "Nexus 9508"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
--
Affected
in Cisco
Search vendor "Cisco"
Nexus 9516
Search vendor "Cisco" for product "Nexus 9516"
--
Safe