CVE-2020-13122

The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" command. This could be used by a read-only user monitoring group or admin to execute commands on the...

CVE-2020-13122

The CVE-2020-13122 entry concerns the novish command-line interface in NoviFlow NoviWare prior to NW500.2.12, deployed on NoviSwitch devices. The vulnerability is a command-injection in the CLI command “show status destination ipaddr,” allowing a read-only monitoring user or an admin to execute a...