CVE-2017-12339

Summary: CVE-2017-12339 is a vulnerability in the CLI of Cisco NX-OS System Software that allows an authenticated, local attacker to perform a command injection due to insufficient input validation of CLI command arguments. The attacker could inject crafted arguments to execute arbitrary commands...

CVE-2017-12338

CVE-2017-12338 (Cisco NX-OS) A vulnerability in the CLI input validation of Cisco NX-OS System Software could allow an authenticated, local attacker to read arbitrary files on the local file system. Affected products include Cisco NX-OS devices across multiple lines (e.g., Multilayer Director Swi...