N/A

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into the Telnet CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86771.

N/A

输入验证不恰当

Cisco Nexus 5000 Series Switches NX-OS System Software 命令注入漏洞

Cisco Nexus 5000 Series Switches是美国思科（Cisco）公司的Cisco Nexus系列数据中心级交换机。Cisco NX-OS System Software是运行在其中的一套数据中心操作系统。 Cisco Nexus 5000 Series Switches中的Cisco NX-OS System Software 7.1版本至7.3版本的中Telnet CLI命令存在命令注入漏洞。本地攻击者可通过注入特制的命令参数利用该漏洞在用户路径之外以用户权限读取或写入任意的文件

N/A

N/A