CVE-2017-12332 File upload in Cisco NX-OS

Medium 4.4 Published 30 Nov 2017 Updated 5 Aug 2024

An authenticated local attacker can write arbitrary files as root via a crafted patch image, leading to privilege escalation on Cisco NX-OS devices.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-12332?

CVE-2017-12332 is a medium-severity vulnerability in Cisco Nx-Os, published on 30 Nov 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations. The vulnerability is due to insufficient restrictions in the patch installation process. An attacker could exploit this vulnerability by installing a crafted patch image on an affected device. The vulnerable operation occurs prior to patch activation. An exploit could allow the attacker to write arbitrary files on an affected system as root. The attacker would need valid administrator credentials to perform this exploit. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Unified Computing System Manager. Cisco Bug IDs: CSCvf16513, CSCvf23794, CSCvf23832.

Weakness: CWE-434

Which versions are affected by CVE-2017-12332?

It affects 2 products.

Products include Cisco Nx-Os, Cisco Unified Computing System.

How do I fix CVE-2017-12332?

No fix has been published for CVE-2017-12332 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-12332 being exploited?

There is no known exploitation of CVE-2017-12332 in the wild and no public exploit code.

All Cisco Nx-Os vulnerabilities

Sources

Also known as GHSA-x46g-gp8x-f356.