CVE-2025-20161: Cisco NX-OS Software Command Injection Vulnerability
A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker with valid Administrator credentials to execute a command injection attack on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of specific elements within a software image. An attacker could exploit this vulnerability by installing a crafted image. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. Note: Administrators should validate the hash of any software image before installation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20161?
CVE-2025-20161 has a high severity rating due to its potential for command injection by an authenticated attacker.
How do I fix CVE-2025-20161?
To resolve CVE-2025-20161, update your Cisco Nexus 3000 or 9000 Series Switches to the latest firmware version provided by Cisco.
Who is affected by CVE-2025-20161?
CVE-2025-20161 affects authenticated users of Cisco Nexus 3000 and Nexus 9000 Series Switches running in standalone NX-OS mode.
What are the potential impacts of CVE-2025-20161?
Exploiting CVE-2025-20161 could allow an attacker to execute arbitrary commands on the affected Cisco devices.
Is there a workaround for CVE-2025-20161?
As of now, Cisco recommends applying the latest firmware updates as the primary method to mitigate CVE-2025-20161.