CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-20650

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP POST request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system. Note: The NX-API feature is disabled by default.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.07

EPSS Ranking 91.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2022-20650

Cisco » N9k-C9316d-Gx » Version: N/A

cpe:2.3:h:cisco:n9k-c9316d-gx:-
Cisco » N9k-C9332d-Gx2b » Version: N/A

cpe:2.3:h:cisco:n9k-c9332d-gx2b:-
Cisco » N9k-C9348d-Gx2a » Version: N/A

cpe:2.3:h:cisco:n9k-c9348d-gx2a:-
Cisco » N9k-C93600cd-Gx » Version: N/A

cpe:2.3:h:cisco:n9k-c93600cd-gx:-
Cisco » N9k-C9364d-Gx2a » Version: N/A

cpe:2.3:h:cisco:n9k-c9364d-gx2a:-
Cisco » Nexus 3048 » Version: N/A

cpe:2.3:h:cisco:nexus_3048:-
Cisco » Nexus 31108pc-V » Version: N/A

cpe:2.3:h:cisco:nexus_31108pc-v:-
Cisco » Nexus 31108tc-V » Version: N/A

cpe:2.3:h:cisco:nexus_31108tc-v:-
Cisco » Nexus 31128pq » Version: N/A

cpe:2.3:h:cisco:nexus_31128pq:-
Cisco » Nexus 3132c-Z » Version: N/A

cpe:2.3:h:cisco:nexus_3132c-z:-
Cisco » Nexus 3132q-V » Version: N/A

cpe:2.3:h:cisco:nexus_3132q-v:-
Cisco » Nexus 3132q-X » Version: N/A

cpe:2.3:h:cisco:nexus_3132q-x:-
Cisco » Nexus 3132q-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3132q-xl:-
Cisco » Nexus 3164q » Version: N/A

cpe:2.3:h:cisco:nexus_3164q:-
Cisco » Nexus 3172pq-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3172pq-xl:-
Cisco » Nexus 3172pq » Version: N/A

cpe:2.3:h:cisco:nexus_3172pq:-
Cisco » Nexus 3172tq-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3172tq-xl:-
Cisco » Nexus 3232c » Version: N/A

cpe:2.3:h:cisco:nexus_3232c:-
Cisco » Nexus 3264c-E » Version: N/A

cpe:2.3:h:cisco:nexus_3264c-e:-
Cisco » Nexus 3264q » Version: N/A

cpe:2.3:h:cisco:nexus_3264q:-
Cisco » Nexus 3408-S » Version: N/A

cpe:2.3:h:cisco:nexus_3408-s:-
Cisco » Nexus 34180yc » Version: N/A

cpe:2.3:h:cisco:nexus_34180yc:-
Cisco » Nexus 3432d-S » Version: N/A

cpe:2.3:h:cisco:nexus_3432d-s:-
Cisco » Nexus 3464c » Version: N/A

cpe:2.3:h:cisco:nexus_3464c:-
Cisco » Nexus 3524-X » Version: N/A

cpe:2.3:h:cisco:nexus_3524-x:-
Cisco » Nexus 3524-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3524-xl:-
Cisco » Nexus 3548-X » Version: N/A

cpe:2.3:h:cisco:nexus_3548-x:-
Cisco » Nexus 3548-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3548-xl:-
Cisco » Nexus 36180yc-R » Version: N/A

cpe:2.3:h:cisco:nexus_36180yc-r:-
Cisco » Nexus 3636c-R » Version: N/A

cpe:2.3:h:cisco:nexus_3636c-r:-
Cisco » Nexus 5548p » Version: N/A

cpe:2.3:h:cisco:nexus_5548p:-
Cisco » Nexus 5548up » Version: N/A

cpe:2.3:h:cisco:nexus_5548up:-
Cisco » Nexus 5596t » Version: N/A

cpe:2.3:h:cisco:nexus_5596t:-
Cisco » Nexus 5596up » Version: N/A

cpe:2.3:h:cisco:nexus_5596up:-
Cisco » Nexus 56128p » Version: N/A

cpe:2.3:h:cisco:nexus_56128p:-
Cisco » Nexus 5672up-16g » Version: N/A

cpe:2.3:h:cisco:nexus_5672up-16g:-
Cisco » Nexus 5672up » Version: N/A

cpe:2.3:h:cisco:nexus_5672up:-
Cisco » Nexus 6000 » Version: N/A

cpe:2.3:h:cisco:nexus_6000:-
Cisco » Nexus 6001 » Version: N/A

cpe:2.3:h:cisco:nexus_6001:-
Cisco » Nexus 6004 » Version: N/A

cpe:2.3:h:cisco:nexus_6004:-
Cisco » Nexus 92160yc-X » Version: N/A

cpe:2.3:h:cisco:nexus_92160yc-x:-
Cisco » Nexus 92300yc » Version: N/A

cpe:2.3:h:cisco:nexus_92300yc:-
Cisco » Nexus 92304qc » Version: N/A

cpe:2.3:h:cisco:nexus_92304qc:-
Cisco » Nexus 92348gc-X » Version: N/A

cpe:2.3:h:cisco:nexus_92348gc-x:-
Cisco » Nexus 9236c » Version: N/A

cpe:2.3:h:cisco:nexus_9236c:-
Cisco » Nexus 9272q » Version: N/A

cpe:2.3:h:cisco:nexus_9272q:-
Cisco » Nexus 93108tc-Ex » Version: N/A

cpe:2.3:h:cisco:nexus_93108tc-ex:-
Cisco » Nexus 93108tc-Fx3p » Version: N/A

cpe:2.3:h:cisco:nexus_93108tc-fx3p:-
Cisco » Nexus 93108tc-Fx » Version: N/A

cpe:2.3:h:cisco:nexus_93108tc-fx:-
Cisco » Nexus 93120tx » Version: N/A

cpe:2.3:h:cisco:nexus_93120tx:-
Cisco » Nexus 93180yc-Ex » Version: N/A

cpe:2.3:h:cisco:nexus_93180yc-ex:-
Cisco » Nexus 93180yc-Fx3 » Version: N/A

cpe:2.3:h:cisco:nexus_93180yc-fx3:-
Cisco » Nexus 93180yc-Fx » Version: N/A

cpe:2.3:h:cisco:nexus_93180yc-fx:-
Cisco » Nexus 93216tc-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_93216tc-fx2:-
Cisco » Nexus 93240yc-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_93240yc-fx2:-
Cisco » Nexus 9332c » Version: N/A

cpe:2.3:h:cisco:nexus_9332c:-
Cisco » Nexus 93360yc-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_93360yc-fx2:-
Cisco » Nexus 9336c-Fx2-E » Version: N/A

cpe:2.3:h:cisco:nexus_9336c-fx2-e:-
Cisco » Nexus 9336c-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_9336c-fx2:-
Cisco » Nexus 9348gc-Fxp » Version: N/A

cpe:2.3:h:cisco:nexus_9348gc-fxp:-
Cisco » Nexus 9364c-Gx » Version: N/A

cpe:2.3:h:cisco:nexus_9364c-gx:-
Cisco » Nexus 9364c » Version: N/A

cpe:2.3:h:cisco:nexus_9364c:-
Cisco » Nexus 9504 Switch » Version: N/A

cpe:2.3:h:cisco:nexus_9504_switch:-
Cisco » Nexus 9508 Switch » Version: N/A

cpe:2.3:h:cisco:nexus_9508_switch:-
Cisco » Nexus 9516 Switch » Version: N/A

cpe:2.3:h:cisco:nexus_9516_switch:-
Cisco » Nx-Os » Version: 10.2(1.72)

cpe:2.3:o:cisco:nx-os:10.2(1.72)
Cisco » Nx-Os » Version: 7.3(8)n1(0.4)

cpe:2.3:o:cisco:nx-os:7.3(8)n1(0.4)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-20650

Products

Pricing

Contact Us