Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vm86-9jrr-2v8f

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user (monitor role) to gain privileged (root) code execution on the switch via command injection.

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user (monitor role) to gain privileged (root) code execution on the switch via command injection.

EPSS

Процентиль: 93%
0.11676
Средний

9.8 Critical

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.8
nvd
больше 8 лет назад

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user (monitor role) to gain privileged (root) code execution on the switch via command injection.

fstec
больше 8 лет назад

Уязвимость операционной системы NoviWare, вызванная переполнением буфера в ходе обработки команды «show log cli», позволяющая нарушителю получить привилегии суперпользователя

EPSS

Процентиль: 93%
0.11676
Средний

9.8 Critical

CVSS3

Дефекты

CWE-119