Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xmwf-5pvf-pm8f

Опубликовано: 23 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.

EPSS

Процентиль: 27%
0.00094
Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 4.4
nvd
почти 3 года назад

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.

CVSS3: 7.8
fstec
почти 3 года назад

Уязвимость интерфейса командной строки (CLI) операционной системы Cisco NX-OS коммутаторов Cisco, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 27%
0.00094
Низкий

7.8 High

CVSS3

Дефекты

CWE-78