Cisco Nexus Series Switches Telnet CLI Command Injection (CVE-2017-6650)

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...

CVE-2017-6650

Summary: CVE-2017-6650 affects Cisco NX-OS System Software 7.1–7.3 on Cisco Nexus Series Switches. The issue is a command injection in the Telnet CLI, caused by insufficient input validation of command arguments. An authenticated local attacker could inject crafted arguments into the Telnet CLI t...