What’s Vulnerable › Vulnerabilities

CVE-2022-20650: Cisco NX-OS Software NX-API Command Injection Vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 14.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-23 · updated 2026-06-17
• Weakness: CWE-78

Description

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP POST request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system. Note: The NX-API feature is disabled by default.

Affected products

• Cisco NX-OS: 10.2(1.72), 7.3(8)n1(0.4)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2

Get alerted when CVE-2022-20650 or the next vulnerability affects your stack