CVE-2020-3454

🗓️ 27 Aug 2020 15:40:17Reported by ciscoType

A vulnerability in the Call Home feature of Cisco NX-OS Software allows an authenticated, remote attacker to inject arbitrary commands with root privileges

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco NX-OS Software Call Home Command Injection Vulnerability	26 Aug 202016:00	–	cisco
Tenable Nessus	Cisco NX-OS Software Call Home Command Injection (cisco-sa-callhome-cmdinj-zkxzSCY)	3 Sep 202000:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Call Home Command Injection (CVE-2020-3454)	28 Nov 202400:00	–	nessus
CNVD	Cisco NX-OS Command Injection Vulnerability (CNVD-2020-49932)	27 Aug 202000:00	–	cnvd
Cvelist	CVE-2020-3454 Cisco NX-OS Software Call Home Command Injection Vulnerability	27 Aug 202015:40	–	cvelist
EUVD	EUVD-2020-24725	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco products	27 Aug 202000:00	–	ncsc
NVD	CVE-2020-3454	27 Aug 202016:15	–	nvd
Prion	Input validation	27 Aug 202016:15	–	prion
ThreatPost	Cisco Patches 'High-Severity' Bugs Impacting Switches, Fibre Storage	26 Aug 202020:03	–	threatpost

NVD

Node

cisco nx-osMatch-

AND

cisco mds_9000Match-

cisco mds_9100Match-

cisco mds_9134Match-

cisco mds_9509Match-

cisco mds_9710Match-

cisco nexus_3016Match-

cisco nexus_3048Match-

cisco nexus_3064Match-

cisco nexus_3064-tMatch-

cisco nexus_31108pc-vMatch-

cisco nexus_31108tc-vMatch-

cisco nexus_31128pqMatch-

cisco nexus_3132c-zMatch-

cisco nexus_3132qMatch-

cisco nexus_3132q-vMatch-

cisco nexus_3132q-xlMatch-

cisco nexus_3164qMatch-

cisco nexus_3172Match-

cisco nexus_3172pq-xlMatch-

cisco nexus_3172tqMatch-

cisco nexus_3172tq-32tMatch-

cisco nexus_3172tq-xlMatch-

cisco nexus_3232cMatch-

cisco nexus_3264c-eMatch-

cisco nexus_3264qMatch-

cisco nexus_3408-sMatch-

cisco nexus_34180ycMatch-

cisco nexus_3432d-sMatch-

cisco nexus_3464cMatch-

cisco nexus_3524Match-

cisco nexus_3524-xMatch-

cisco nexus_3524-xlMatch-

cisco nexus_3548Match-

cisco nexus_3548-xMatch-

cisco nexus_3548-xlMatch-

cisco nexus_36180yc-rMatch-

cisco nexus_3636c-rMatch-

cisco nexus_5548pMatch-

cisco nexus_5548upMatch-

cisco nexus_5596tMatch-

cisco nexus_5596upMatch-

cisco nexus_56128pMatch-

cisco nexus_5624qMatch-

cisco nexus_5648qMatch-

cisco nexus_5672upMatch-

cisco nexus_5696qMatch-

cisco nexus_6001Match-

cisco nexus_6004Match-

cisco nexus_7000Match-

cisco nexus_7700Match-

cisco nexus_9000vMatch-

cisco nexus_92160yc-xMatch-

cisco nexus_92300ycMatch-

cisco nexus_92304qcMatch-

cisco nexus_92348gc-xMatch-

cisco nexus_9236cMatch-

cisco nexus_9272qMatch-

cisco nexus_93108tc-exMatch-

cisco nexus_93108tc-fxMatch-

cisco nexus_93120txMatch-

cisco nexus_93128txMatch-

cisco nexus_93180lc-exMatch-

cisco nexus_93180yc-exMatch-

cisco nexus_93180yc-fxMatch-

cisco nexus_93216tc-fx2Match-

cisco nexus_93240yc-fx2Match-

cisco nexus_9332cMatch-

cisco nexus_9332pqMatch-

cisco nexus_93360yc-fx2Match-

cisco nexus_9336c-fx2Match-

cisco nexus_9336pq_aci_spineMatch-

cisco nexus_9348gc-fxpMatch-

cisco nexus_9364cMatch-

cisco nexus_9372pxMatch-

cisco nexus_9372px-eMatch-

cisco nexus_9372txMatch-

cisco nexus_9372tx-eMatch-

cisco nexus_9396pxMatch-

cisco nexus_9396txMatch-

cisco nexus_9504Match-

cisco nexus_9508Match-

cisco nexus_9516Match-

[
  {
    "product": "Cisco NX-OS Software 5.0(1a)",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-callhome-cmdinj-zkxzSCY

21 Nov 2024 05:31Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2

CVSS 29

CVSS 37.2

EPSS0.01302

SSVC