Read the docs
TI-2017-09112 Aliases CVE-2017-12340GHSA-7fgx-h5gw-66x7

Improper access control in Cisco Multilayer Director, Nexus 7000 Series, and Nexus 7700…

Priority LOW 20CWE-284Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-284.

Summary

A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash shell is disabled on the system. The vulnerability is due to insufficient sanitization of user-supplied parameters that are passed to certain functions of the Python scripting sandbox of the affected system. An attacker could exploit this vulnerability to escape the scripting sandbox and enter the Bash shell of the operating system with the privileges of the authenticated user for the affected system. To exploit this vulnerability, the attacker must have local access to the affected system and be authenticated to the affected system with administrative or Python execution privileges. Cisco Bug IDs: CSCvd86513.

Why it matters now

EPSS 0.00338 27th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco Multilayer Director, Nexus 7000 Series, and Nexus 7700 Series SwitchesCisco Multilayer Director, Nexus 7000 Series, and Nexus 7700 Series Switches—No fix listedCNA
  • Cisco Multilayer Director, Nexus 7000 Series, and Nexus 7700 Series Switches Vendor— Affected Cisco Multilayer Director, Nexus 7000 Series, and Nexus 7700 Series Switches Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:cisco:nx-os:8.1\(0.70\)s0:*:*:*:*:*:*:*8.1(0.70)s0VulnerableCisco
  • cpe:2.3:o:cisco:nx-os:8.1\(0.70\)s0:*:*:*:*:*:*:* Versions 8.1(0.70)s0 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-12340
  2. 2026-10-03 Alias added: GHSA-7fgx-h5gw-66x7

References

Advisory 1

  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2024-13332 Cisco NX-OS Software CLI Command Injection Vulnerability KEVCVSS 3.1MEDIUM 6.7
  • TI-2018-00260 Improper input validation in Cisco NX-OS unknown CVSS 3.0CRITICAL 9.8
  • TI-2019-01226 Cisco NX-OS Software Netstack Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2022-05183 Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2022-05182 Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability CVSS 3.1HIGH 8.6
See all 274 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences