# MA-1088.072024: MyCERT Advisory - Exploited Vulnerability in Cisco Switches

**Date:** 04 Jul 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1088.072024  
**Advisory ID:** MA-1088.072024

---

**1.0 Introduction**
Recently, Cisco has released a security advisory for a vulnerability in the CLI of Cisco NX-OS Software.
**2.0 Impact**
A vulnerability could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.
**3.0 Affected Products**
- MDS 9000 Series Multilayer Switches ([CSCwj97007](https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj97007))
- Nexus 3000 Series Switches ([CSCwj97009](https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj97009))
- Nexus 5500 Platform Switches ([CSCwj97011](https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj97011))
- Nexus 5600 Platform Switches ([CSCwj97011](https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj97011))
- Nexus 6000 Series Switches ([CSCwj97011](https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj97011))
- Nexus 7000 Series Switches ([CSCwj94682](https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj94682))
- Nexus 9000 Series Switches in standalone NX-OS mode ([CSCwj97009](https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj97009))
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the following advisories and apply the necessary updates:
- <https://sec.cloudapps.cisco.com/security/center/softwarechecker.x>
Generally, CyberSecurity Malaysia advises the users of these devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact the Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web:<https://www.mycert.org.my>
**5.0    References**
- <https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP>
- <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20399>
- <https://thehackernews.com/2024/07/chinese-hackers-exploiting-cisco.html>