A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.
This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.
Note: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:
Nexus 3000 Series Switches
Nexus
Connections 79
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3100vdc3fb9e0-466b-4356-973b-ecce92dbb730
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_340085fba524-0d9d-43a7-a397-fa1121654b82
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9000v1a3ff8fc-cff5-4321-a35f-cfcdbb9a05eb
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3172pq/pq-xl1906887c-76ab-4885-9711-09d1dd04066b
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9236cb544a4a7-6027-4a29-8ab8-9894a1f7fcc4
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_35486d9703f1-6df1-4c56-a994-25cac7b5e201
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9509054a6252-014d-4446-86ec-9a70c4891fab
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9372tx-e11915ebe-79e2-47e5-a1bf-07ed28aafabc
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9336pq_aci_spinee542d923-e171-492d-9b8e-6b9e17bad303
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9508f56501ef-fb2a-411a-b2e4-9d0064a742be
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9500_supervisor_a+8fe5edca-56c8-456b-9e3d-a945e7767ca0
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_560030699370-dc2b-43e9-8fcd-26014a7abc64
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_5548upf8099a98-3e06-48c9-a483-1ab03904f1a2
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9000e5b8bece-7243-4f8e-b688-51982eb3fe72
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9332pq981c39e3-35d9-4a97-ae2f-291f359d6955
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93180yc-fxf607a924-dba9-4784-8c4b-6b4dc2e03ac7
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93180yc-ex-242f238d9d-7b81-4298-b908-802218412bd8
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9716d-gx157b6964-35a8-4b44-8bae-bd4d6653c98c
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_92160yc-x55960a5a-4845-4157-b420-95941095c5be
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_7000_supervisor_19f4f7ee4-37be-4272-8ebd-dcb433ea5819
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9808624bbe98-827b-4ceb-9f82-2a9d25bc8065
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3464c3cb0e4cb-f097-4f78-af55-5d0404923cb9
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9300529be2ab-4e16-487a-b28c-70226393c427
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93108tc-ex5babec5a-96bb-4f83-b30d-5d24e945c940
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_34200yc-sm8b273f13-4661-4802-ba63-cd99c7f21283
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9372px9f65ff69-3d2e-4ec5-a612-4572861bcdc6
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_701864846fee-bd31-4c5f-a3fc-f69e9f504144
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9332c653aa40e-b38b-431d-bf10-8d673c7b7e4b
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_7000_10-slote9b1e391-875d-4b1c-b03e-6a58372e3889
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9000_in_standalone_nx-os_modec9d8fe01-b72f-482f-851c-c38527e6817c
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_500052d487f5-a1bd-48cf-bcba-9e300a21c017
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3100-z6b5227e0-312f-4ccf-aabc-cb962587eb72
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9500_supervisor_a323c60c6-8fc8-4e73-93f4-38ad436182b5
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9516e1e741f6-5a37-45ca-9b00-8d2fb3a2371e
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3132c-z9ce979b0-3738-4f84-b1d3-311c40d86fca
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3016446bcdce-9085-4f84-8327-6419b0cb9e5f
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9222i497dad9d-eada-433d-8e96-e7e9d5fd9abf
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93108tc-fx-24444a3a5b-654d-4c7c-85f1-ef3ef7cc6671
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_7700c89e5433-6727-41ab-8ccf-4cd529dfbe3e
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9132tbb371713-698c-4bf8-ae1e-082c90cbf9e1
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9216ib9a4ed56-8879-4585-aab8-ed4f80081572
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3132q-x/3132q-xl5bbd9872-0175-49b6-8a2b-f2d80b492545
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_94088a3b303f-4755-4e9e-8660-381343b12500
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93180yc-fx3h4354b4da-0ff1-41c0-a8aa-f769d786f77f
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9332d-gx2b514472e5-9bcd-42a4-8045-8e6a745d52dc
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9332d-h2r1040583a-390a-4ead-b41c-78e676b4fa77
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93108tc-fx3p7bd31870-e161-46f6-ae5c-c946c08ec75a
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_5548p3aff83aa-bc74-4a7a-bffb-65bf8d6fdb95
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_7700_supervisor_2e180da80b-3168-4a3e-95af-a84107bdf64f
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3232cc7d8be4c-9244-4e57-868a-badd95789bd6
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_50109f5191d8-d084-4b67-b18d-df0e9db3790c
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_34180yc579a044d-aac5-46c0-bdd0-8622286a739b
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3548-xedf31526-ee9c-4a95-b83b-0430033b40b5
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3232c_b68b1422-5d52-4d3a-96be-1cb7012d9bd6
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9396txd078531e-58d9-4104-a132-e892582b6c9b
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_77025a0d1618-e416-4764-acc4-104306192849
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9316d-gxe687e629-6f15-4227-9132-06078bfe13fe
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9500_16-slot5b795c72-2877-4559-93b5-6e3648bdb596
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_300018721058-515a-4452-a326-98884dd5e0d7
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3064xd5d516fd-ba7e-4718-a32b-4a32033aaaae
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93600cd-gx0f697757-25b1-4422-b76b-ec0406d61626
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9348gc-fxp04eb34cb-009f-445b-816d-c3acde2165bd
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9372px-ea08b05d0-eed7-4bd0-ad98-afda0fbc0265
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_700487e93cad-367b-49bd-9d27-e64c14f7c14d
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9336pq_aci2ebc3b8b-fa60-40da-a41d-1a991cc6562f
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3132q69b348fb-b9b7-40c6-b299-2b94924997d9
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9500_8-slotbfc7cdde-0e1b-49d1-977a-76ddb275d53b
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_700977794051-f595-4edf-b0ab-b4a172f77ba4
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9500ab2ddfbd-0ae9-42a6-a20b-cb4f3f29b020
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93240yc-fx28faa477d-5ea5-4639-abb8-ba81122ed276
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9504745e423c-34a8-4acf-83c5-49218ce61d11
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3524-xd5ed70c4-09b8-4c7a-ac97-5690f2700448
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_920043d8b917-2eca-42dc-81a1-3f650c2a25a0
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_9500_supervisor_b+79de0c47-1af0-498e-a5e8-e321820268e6
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9140d589c0ac-d3b3-46cd-8f5d-1fe40e1bbb9f
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_93180yc-fx3sd99b5154-85b0-4c8d-a9b6-522ff67183e7
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_3132q-xe19271bf-18fe-46f3-9b00-f1a2489016f5
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · nexus_5624q41424e0c-cb54-4c98-b286-716b8fae7ce0
has environmental constraint1 retained · stored CVE-2024-20399 → cisco · mds_9706ea56ef27-8e9a-4684-af93-3456d4e03b7e