BugZero | Cisco BugID CSCwd18011 - Cisco NX-OS Software CLI Command Injection Vulnera...

Cisco - Defect ID: CSCwd18011

Cisco NX-OS Software CLI Command Injection Vulnerability

Cisco - Defect ID: CSCwd18011

Cisco NX-OS Software CLI Command Injection Vulnerability

Last updated on February 21st, 2026

BugZero Risk Score
6.1 Medium

Overall: 6.1

Severity: 6.4

Lifecycle: 9.1

Popularity: 5.1

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Bug Details

Description

Symptom

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cli-cmdinject-euQVK9u The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.

Conditions

Please refer to the Security Advisory.

Workaround

Please refer to the Security Advisory.

Further Problem Description

Please refer to the Security Advisory.

PSIRT Evaluation

The Cisco PSIRT has assigned this bug the following CVSS version 3 score. The Base CVSS score as of the time of evaluation is 4.4: https://sec.cloudapps.cisco.com/security/center/cvssCalculator.x?vector=CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE ID CVE-2023-20050 has been assigned to document this issue. Information about Fixed, Vulnerable, and Non-vulnerable releases--as well as information about fixed release availability--is not maintained by Cisco PSIRT. Please refer to the appropriate fields in this bug. If you require additional help to obtain this information, please open a support case with your support organization. Additional information on Cisco's security vulnerability policy can be found at the following URL: https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html

Change history

2025-12-05 Added: 6.2(10), 6.2(12), 6.2(14), 6.2(16), 6.2(18), 6.2(2), 6.2(20), 6.2(20a), 6.2(22), 6.2(24), 6.2(24a), 6.2(2a), 6.2(6), 6.2(6a), 6.2(6b), 6.2(8), 6.2(8a), 6.2(8b), 7.2(0)D1(1), 7.2(1)D1(1), 7.2(2)D1(1), 7.2(2)D1(2), 7.3(0)D1(1), 7.3(0)DX(1), 7.3(1)D1(1), 7.3(2)D1(1), 7.3(2)D1(2), 7.3(2)D1(3), 7.3(2)D1(3a), 7.3(3)D1(1), 7.3(4)D1(1), 7.3(5)D1(1), 7.3(6)D1(1), 7.3(7)D1(1), 7.3(8)D1(1), 7.3(9)D1(1), 8.0(1), 8.1(1), 8.1(2), 8.1(2a), 8.2(1), 8.2(2), 8.2(3), 8.2(4), 8.2(5), 8.2(6), 8.2(7), 8.2(7a), 8.2(8), 8.2(9), 8.3(1), 8.3(2), 8.4(1), 8.4(2), 8.4(3), 8.4(4), 8.4(4a), 8.4(5), 8.4(6), 8.4(6a)

Relevant Products

Click on a version to see all relevant bugs

Affected versions:6.2(10), 6.2(12), 6.2(14), 6.2(16), 6.2(18), 6.2(2), 6.2(20), 6.2(20a), 6.2(22), 6.2(24), 6.2(24a), 6.2(2a), 6.2(6), 6.2(6a), 6.2(6b), 6.2(8), 6.2(8a), 6.2(8b), 7.2(0)D1(1), 7.2(1)D1(1), 7.2(2)D1(1), 7.2(2)D1(2), 7.3(0)D1(1), 7.3(0)DX(1), 7.3(1)D1(1), 7.3(2)D1(1), 7.3(2)D1(2), 7.3(2)D1(3), 7.3(2)D1(3a), 7.3(3)D1(1), 7.3(4)D1(1), 7.3(5)D1(1), 7.3(6)D1(1), 7.3(7)D1(1), 7.3(8)D1(1), 7.3(9)D1(1), 8.0(1), 8.1(1), 8.1(2), 8.1(2a), 8.2(1), 8.2(2), 8.2(3), 8.2(4), 8.2(5), 8.2(6), 8.2(7), 8.2(7a), 8.2(8), 8.2(9), 8.3(1), 8.3(2), 8.4(1), 8.4(2), 8.4(3), 8.4(4), 8.4(4a), 8.4(5), 8.4(6), 8.4(6a)

Fixed versions: 8.2(10), 8.2(11), 8.4(10), 8.4(11), 8.4(12), 8.4(13), 8.4(7), 8.4(8), 8.4(9)

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: 8.2(10), 8.2(11), 8.4(10), 8.4(11), 8.4(12), 8.4(13), 8.4(7), 8.4(8), 8.4(9)

Top Cisco Defects

9.7Defect ID: CSCvx82406
Memory leaks in IOS_PRIV_OPER_DB
9.7Defect ID: CSCwf37271
cnssdaemon.log fills up flash partition 2, preventing AP upgrades
9.7Defect ID: CSCwi93213
9800 WLC marked "AAA Server Down" after switchover when using key 6 password encryption
9.7Defect ID: CSCwt50498
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCvz07394
2960X Stack may observe hang/freeze of member switches or complete stack.

Ready to prevent the next vendor outage?

Get a demo

Cisco - Defect ID: CSCwd18011

Cisco NX-OS Software CLI Command Injection Vulnerability

Cisco - Defect ID: CSCwd18011

Cisco NX-OS Software CLI Command Injection Vulnerability

Last updated on February 21st, 2026

BugZero Risk Score6.1 Medium

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

PSIRT Evaluation

Top Cisco Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.1 Medium