CVE-2025-20161
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Cisco NX-OS Software Command Injection Vulnerability
A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker with valid Administrator credentials to execute a command injection attack on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of specific elements within a software image. An attacker could exploit this vulnerability by installing a crafted image. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. Note: Administrators should validate the hash of any software image before installation.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco NX-OS Software
- Vendor
- Cisco
- Product
- Cisco NX-OS Software
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.2(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I5(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(7a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.2(2v) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(8) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(11) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.2(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.2(2t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.2(3y) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(1t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(6z) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)F3(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(3z) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)IM7(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(11b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(5a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I6(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I5(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.2(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(10) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)IC4(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)F3(3c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)F3(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)F3(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I5(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I6(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(11a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(8z) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(9) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(9) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(10a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I5(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(1z) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.2(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)F3(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(8b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(6t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I5(3a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(8) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)F3(3a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(8a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)F3(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I4(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)IA7(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)IA7(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(7b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(2)A8(4a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(8) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(9) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.1(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.1(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(5w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(7k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(9w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(7a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(8) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.0(3)I7(10) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(1q) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(9) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.1(2t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(3t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(10) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(11) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(12) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(3v) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(99w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(99x) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3q) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(13) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3x) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.5(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(8) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3r) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(14) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4h) | affected | Unavailable | Unavailable | Unavailable | None listed |