CVE-2017-12342

🗓️ 30 Nov 2017 09:00:00Reported by ciscoType

A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches enables unauthenticated local attacker to read and send packets outside OAC scope due to insufficient internal security measures, allowing code execution on the host OS

Reporter	Title	Published	Views	Family All 7
Cisco	Cisco Nexus Series Switches Open Agent Container Code Execution Vulnerability	29 Nov 201716:00	–	cisco
CNVD	Code Execution Vulnerability in Multiple Cisco Products	4 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-12342	30 Nov 201709:00	–	cvelist
EUVD	EUVD-2017-3915	7 Oct 202500:30	–	euvd
NVD	CVE-2017-12342	30 Nov 201709:29	–	nvd
Prion	Design/Logic Flaw	30 Nov 201709:29	–	prion
Tenable Nessus	Cisco NX-OS Exposure of Resource to Wrong Sphere (CVE-2017-12342)	4 Dec 202400:00	–	nessus

NVD

Node

cisco nx-osMatch7.0(0)hsk(0.357)

cisco nx-osMatch8.1(1)

[
  {
    "product": "Cisco Nexus Series Switches",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Nexus Series Switches"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039940
securityfocus	www.securityfocus.com/bid/102027
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos9

13 May 2026 00:24Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.6

CVSS 36.8

EPSS0.0007