#VU9491 Security restrictions bypass in Cisco Systems, Inc products - CVE-2017-12332

Cybersecurity Help s.r.o.

Published: 2017-12-01

Vulnerability identifier: #VU9491

Vulnerability risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-12332

CWE-ID: CWE-264

Exploitation vector: Local

Exploit availability: No

Vendor: Cisco Systems, Inc

Description
The vulnerability allows a local attacker to bypass security restrictions on the target system.

The weakness exists in Cisco NX-OS System Software due to insufficient restrictions in the patch installation process. A local attacker with knowledge of valid administrator credentials can install a specially crafted patch image, bypass security restrictions and write a file to arbitrary locations.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Nexus 7700 Series Switches: All versions

Nexus 7000 Series Switches: All versions

Nexus 6000 Series Switches: All versions

Nexus 5600 Platform Switches: All versions

Nexus 5500 Platform Switches: All versions

Nexus 5000 Series Switches: All versions

Nexus 2000 Series Fabric Extenders: All versions

Multilayer Director Switches: All versions

: All versions

External links
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos8

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

Latest bulletins with this vulnerability

Multiple vulnerabilities in Cisco NX-OS System Software