Command injection

A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by...

CVE-2018-0306

CVE-2018-0306 describes an input-validation flaw in the CLI parser of Cisco NX-OS Software that enables an authenticated, local attacker to perform command-injection and execute arbitrary root-level commands. Affected products include MDS 9000 switches, Nexus series (1000V, 1100, 2000, 3000, 3500...

CVE-2018-0306

A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by...