A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected device. This vulnerability is due to a logic error when verifying the user role when an SFTP connection is opened to an affected device. An attacker could exploit this vulnerability by connecting and authenticating via SFTP as a valid, non-administrator user. A successful exploit could allow the attacker to read or overwrite files from the underlying operating system with the privileges of the authenticated user. There are workarounds that address this vulnerability.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nx-os | Cisco | 9.2(1) (including) | 9.2(1) (including) |
| Nx-os | Cisco | 9.2(2) (including) | 9.2(2) (including) |
| Nx-os | Cisco | 9.2(2t) (including) | 9.2(2t) (including) |
| Nx-os | Cisco | 9.2(2v) (including) | 9.2(2v) (including) |
| Nx-os | Cisco | 9.2(3) (including) | 9.2(3) (including) |
| Nx-os | Cisco | 9.2(4) (including) | 9.2(4) (including) |
| Nx-os | Cisco | 9.3(1) (including) | 9.3(1) (including) |
| Nx-os | Cisco | 9.3(2) (including) | 9.3(2) (including) |
| Nx-os | Cisco | 9.3(3) (including) | 9.3(3) (including) |
| Nx-os | Cisco | 9.3(4) (including) | 9.3(4) (including) |
| Nx-os | Cisco | 9.3(5) (including) | 9.3(5) (including) |
| Nx-os | Cisco | 9.3(6) (including) | 9.3(6) (including) |
| Nx-os | Cisco | 9.3(7) (including) | 9.3(7) (including) |
| Nx-os | Cisco | 9.3(7a) (including) | 9.3(7a) (including) |
| Nx-os | Cisco | 9.3(8) (including) | 9.3(8) (including) |
| Nx-os | Cisco | 9.3(9) (including) | 9.3(9) (including) |
| Nx-os | Cisco | 9.3(10) (including) | 9.3(10) (including) |
| Nx-os | Cisco | 9.3(11) (including) | 9.3(11) (including) |
| Nx-os | Cisco | 10.1(1) (including) | 10.1(1) (including) |
| Nx-os | Cisco | 10.1(2) (including) | 10.1(2) (including) |
| Nx-os | Cisco | 10.1(2t) (including) | 10.1(2t) (including) |
| Nx-os | Cisco | 10.2(1) (including) | 10.2(1) (including) |
| Nx-os | Cisco | 10.2(1q) (including) | 10.2(1q) (including) |
| Nx-os | Cisco | 10.2(2) (including) | 10.2(2) (including) |
| Nx-os | Cisco | 10.2(3) (including) | 10.2(3) (including) |
| Nx-os | Cisco | 10.2(3t) (including) | 10.2(3t) (including) |
| Nx-os | Cisco | 10.2(4) (including) | 10.2(4) (including) |
| Nx-os | Cisco | 10.2(5) (including) | 10.2(5) (including) |
| Nx-os | Cisco | 10.3(1) (including) | 10.3(1) (including) |
| Nx-os | Cisco | 10.3(2) (including) | 10.3(2) (including) |