Vulnerability · Published Aug 25, 2021 · Assigned by cisco

CVE-2021-1584Cisco Nexus 9000 Series Fabric Switches ACI Mode Privilege Escalation Vulnerability

Medium 6.0

In plain English

A medium-severity OS command injection in Cisco NX-OS System Software in ACI Mode from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)6.0Medium

Exploit odds (30 days)0.4%top 61.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient restrictions during the execution of a specific CLI command. An attacker with administrative privileges could exploit this vulnerability by performing a command injection attack on the vulnerable command. A successful exploit could allow the attacker to access the underlying operating system as root.

Affected products (as reported)

Vendor	Product	Versions
Cisco	Cisco NX-OS System Software in ACI Mode	n/a

Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

References

20210825 Cisco Nexus 9000 Series Fabric Switches ACI Mode Privilege Escalation Vulnerability vendor-advisory, x_refsource_CISCO