CVE:CVE-2017-6650
CNNVD:CNNVD-201705-899
Cisco Nexus 5000 Series Switches是美国思科（Cisco）公司的Cisco Nexus系列数据中心级交换机。Cisco NX-OS System Software是运行在其中的一套数据中心操作系统。
Cisco Nexus 5000 Series Switches中的Cisco NX-OS System Software 7.1版本至7.3版本的中Telnet CLI命令存在命令注入漏洞。本地攻击者可通过注入特制的命令参数利用该漏洞在用户路径之外以用户权限读取或写入任意的文件。
solution:Upgrade cisco nx-os to a higher version than 7.1(1n1(1,7.1(2n1(1,7.1(3n1(1,7.1(3n1(2,7.1(3n1(2.1,7.1(3n1(3.12,7.1(4n1(1,7.2(0d1(0.437,7.2(0n1(1,7.2(0zz(99.1,7.2(1n1(1,7.3(0n1(1,and avoid the version 7.1(1)n1(1),7.1(2)n1(1),7.1(3)n1(1),7.1(3)n1(2),7.1(3)n1(2.1),7.1(3)n1(3.12),7.1(4)n1(1),7.2(0)d1(0.437),7.2(0)n1(1),7.2(0)zz(99.1),7.2(1)n1(1),7.3(0)n1(1)