CVE-2022-20650

Estado: ModificadaAlta (8.8)—
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP POST request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system. Note: The NX-API feature is disabled by default.
CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 8.8
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 15%
Percentil entre todas las CVEs puntuadas: 97
Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Cisco — Nx-os
CWE

CWE-78
CWE-78
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-20650",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-20650",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-06T16:00:19.356755Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco NX-OS Software",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-02-23T18:15:18.690",
  "references": [
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP POST request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system. Note: The NX-API feature is disabled by default."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la función NX-API del software Cisco NX-OS podría permitir a un atacante remoto autentificado ejecutar comandos arbitrarios con privilegios de root. La vulnerabilidad se debe a la insuficiente validación de entrada de los datos suministrados por el usuario que se envían a la NX-API. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud HTTP POST manipulada a la NX-API de un dispositivo afectado. Una explotación exitosa podría permitir al atacante ejecutar comandos arbitrarios con privilegios de root en el sistema operativo subyacente. Nota: La función NX-API está desactivada por defecto"
    }
  ],
  "lastModified": "2026-06-17T04:24:46.310",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:10.2\\(1.72\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C36AE215-4B96-4F85-8B48-F2785B4159A6"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:n9k-c9316d-gx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "122E24C3-1411-46DA-92F1-635BC0784559"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n9k-c9332d-gx2b:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "50FE8720-EA9D-47CF-9CDB-CC09FBDD008C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n9k-c9348d-gx2a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1D100815-C171-46F4-B675-64E20D8C4FD0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n9k-c93600cd-gx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2D5229B-AFB2-4B28-95BB-563DBC346982"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n9k-c9364d-gx2a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7F0AC2DC-234F-48BA-BCC8-DE82C293C273"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_31108pc-v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4E930332-CDDD-48D5-93BC-C22D693BBFA2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F4226DA0-9371-401C-8247-E6E636A116C3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B3293438-3D18-45A2-B093-2C3F65783336"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132q-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C97C29EE-9426-4BBE-8D84-AB5FF748703D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172pq:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CED628B5-97A8-4B26-AA40-BEC854982157"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7BB9DD73-E31D-4921-A6D6-E14E04703588"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172tq-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F3229124-B097-4AAC-8ACD-2F9C89DCC3AB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "652A2849-668D-4156-88FB-C19844A59F33"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "10F80A72-AD54-4699-B8AE-82715F0B58E2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "74CB4002-7636-4382-B33E-FBA060A13C34"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "57572E4A-78D5-4D1A-938B-F05F01759612"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4283E433-7F8C-4410-B565-471415445811"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "11411BFD-3F4D-4309-AB35-A3629A360FB0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-fx3p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BBEF7F26-BB47-44BD-872E-130820557C23"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F70D81F1-8B12-4474-9060-B4934D8A3873"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7349D69B-D8FA-4462-AA28-69DD18A652D9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91231DC6-2773-4238-8C14-A346F213B5E5"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F1FC2B1F-232E-4754-8076-CC82F3648730"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9504_switch:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D07B5399-44C7-468D-9D57-BB5B5E26CE50"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9508_switch:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B76FB64F-16F0-4B0B-B304-B46258D434BA"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9516_switch:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2E128053-834B-4DD5-A517-D14B4FC2B56F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:7.3\\(8\\)n1\\(0.4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "886E8798-594B-4897-95BD-A950B1CCD563"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1766443C-1C5A-486E-A36F-D3045F364D78"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_6000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6A58223F-3B15-420B-A6D4-841451CF0380"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}