N/A

A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Cisco 多款产品操作系统命令注入漏洞

Cisco Enterprise NFV Infrastructure Software（NFVIS）和Cisco Network Services Orchestrator（NSO）都是美国思科（Cisco）公司的产品。Cisco Enterprise NFV Infrastructure Software是一套NVF基础架构软件平台。该平台可以通过中央协调器和控制器实现虚拟化服务的全生命周期管理。Cisco Network Services Orchestrator是一套网络自动化服务解决方案。 Ci

N/A

N/A