Description (CNA)
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments for a specific CLI command. An attacker could exploit this vulnerability by including crafted input as the argument of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco NX-OS Software | affected 9.3(3); affected 9.3(4); affected 9.3(5); affected 9.3(6); affected 10.1(2); affected 10.1(1); affected 9.3(5w); affected 9.3(7); affected 9.3(7k); affected 10.2(1); affected 9.3(7a); affected 9.3(8); affected 10.2(1q); affected 10.2(2); affected 9.3(9); affected 10.1(2t); affected 10.2(3); affected 10.2(3t); affected 9.3(10); affected 10.2(2a); affected 10.3(1); affected 10.2(4); affected 10.3(2); affected 9.3(11); affected 10.3(3); affected 10.2(5); affected 9.3(12); affected 10.2(3v); affected 10.4(1); affected 10.3(99w); affected 10.2(6); affected 10.3(3w); affected 10.3(99x); affected 10.3(3o); affected 10.3(4); affected 10.3(3p); affected 10.3(4a); affected 10.4(2); affected 10.3(3q); affected 10.3(3x); affected 10.3(4g); affected 10.3(3r) |
| Cisco / Cisco NX-OS System Software in ACI Mode | affected 16.0(2h); affected 16.0(2j); affected 16.0(3d); affected 16.0(3e); affected 16.0(4c); affected 16.0(5h); affected 16.0(3g); affected 16.0(5j) |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.