Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" command. This could be used by a read-only user (monitoring group) or admin to execute commands on the operating system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NoviFlow NoviWare NW500 操作系统命令注入漏洞
Vulnerability Description
NoviFlow NoviWare NW500.2.12之前版本（NoviSwitch设备上）中的‘显示状态目的地IP地址’命令存在安全漏洞。攻击者可利用该漏洞在操作系统上执行命令。
CVSS Information
N/A
Vulnerability Type
N/A