Lucene search
PRIOn knowledge basePRION:CVE-2020-13122HistoryAug 17, 2020 - 4:15 p.m.
Command injection
2020-08-1716:15:00
PRIOn knowledge base
www.prio-n.com
2
The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the “show status destination ipaddr” command. This could be used by a read-only user (monitoring group) or admin to execute commands on the operating system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| noviware | eq | <= nw500.2.12 |
Related
cvelist
cvelist
CVE-2020-13122
2020-08-17 15:59:25
cve
cve
CVE-2020-13122
2020-08-17 16:15:13
nvd
nvd
CVE-2020-13122
2020-08-17 16:15:13