Lucene search

K
cveCiscoCVE-2012-4076
HistoryOct 14, 2013 - 3:34 a.m.

CVE-2012-4076

2013-10-1403:34:51
CWE-20
cisco
web.nvd.nist.gov
27
cve-2012-4076
cisco nx-os
local users
privileges
arbitrary commands
shell metacharacters
system library function
bug ids csctf23559
csctf27780
nvd

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0

Percentile

5.1%

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780.

Affected configurations

Nvd
Node
cisconx-osMatch-
VendorProductVersionCPE
cisconx-os-cpe:2.3:o:cisco:nx-os:-:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2012-4076