CVE-2025-20161

A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker with valid Administrator credentials to execute a command injection attack on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of specific elements within a software image. An attacker could exploit this vulnerability by installing a crafted image. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.  Note: Administrators should validate the hash of any software image before installation.

• CWE-78

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ici-dpOjbWxk

Published

Feb 26, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20156A vulnerability in the REST API of Cisco Meeting Management …9.9
• CVE-2025-20157A vulnerability in certificate validation processing of Cisc…5.9
• CVE-2025-20158A vulnerability in the debug shell of Cisco Video Phone 8875…4.4
• CVE-2025-20159A vulnerability in the management interface access control l…5.3
• CVE-2025-2016Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote …7.8
• CVE-2025-20160A vulnerability in the implementation of the TACACS+ protoco…8.1
• CVE-2025-20162A vulnerability in the DHCP snooping security feature of Cis…8.6
• CVE-2025-20163A vulnerability in the SSH implementation of Cisco Nexus Das…8.7
• CVE-2025-20164A vulnerability in the Cisco Industrial Ethernet Switch Devi…8.3
• CVE-2025-20165A vulnerability in the SIP processing subsystem of Cisco Bro…7.5
• CVE-2025-20166A vulnerability in the web-based management interface of Cis…5.4
• CVE-2025-20167A vulnerability in the web-based management interface of Cis…5.4