CVE:CVE-2017-12332
CNNVD:CNNVD-201711-1232
Cisco Multilayer Director Switches等都是美国思科（Cisco）公司的产品。Cisco Multilayer Director Switches是一款交换机产品。Unified Computing System Manager是一套内嵌设备管理软件。Cisco NX-OS System Software是一套运行在交换机中的软件。
多款Cisco产品中的Cisco NX-OS System Software的补丁安装存在任意文件写入漏洞，该漏洞源于补丁安装进程中的限制不足。本地攻击者可通过获取有效的管理员证书利用该漏洞以root权限向任意位置写入文件。以下产品受到影响：Cisco Multilayer Director Switches；Nexus 2000 Series Fabric Extenders；Nexus 5000 Series Switches；Nexus 5500 Platform Switches；Nexus 5600 Platform Switches；Nexus 6000 Series Switches；Nexus 7000 Series Switches；Nexus 7700 Series Switches；Unified Computing System Manager。
solution:Upgrade cisco unified_computing_system to a higher version than 7.0(0hsk(0.357,and avoid the version 7.0(0)hsk(0.357); Upgrade cisco nx-os to a higher version than 8.1(0bd(0.20,8.1(1,and avoid the version 8.1(0)bd(0.20),8.1(1)