N/A

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting malicious command arguments into a vulnerable CLI command. A successful exploit could allow the attacker, authenticated as a privileged user, to execute arbitrary commands with root privileges. Note: On products that support multiple virtual device contexts (VDC), this vulnerability could allow an attacker to access files from any VDC. This vulnerability affects Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 3600 Platform Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve51704, CSCve91749, CSCve91768.

N/A

输入验证不恰当

多款Cisco产品NX-OS Software CLI 输入验证错误漏洞

Cisco Nexus 3000 Series Switches等都是美国思科（Cisco）公司的产品。Nexus 3000 Series Switches是一款交换机设备。Fabric Modules是一款交换机矩阵模块。NX-OS Software是运行在其中的一套交换机使用的数据中心级操作系统软件。CLI是其中的一个命令行工具。 多款Cisco产品中的NX-OS Software的CLI存在输入验证漏洞，该漏洞源于程序没有对命令参数执行充分的输入验证。本地攻击者可通过向易受攻击的CLI命令注入恶意的

N/A

N/A