Not rated
CVE-2018-0337 A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local…
Description
A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file systems. An attacker could exploit this vulnerability by issuing crafted commands in the CLI of an affected device. A successful exploit could allow the attacker to cause other users to execute unwanted, arbitrary commands on the affected device. Cisco Bug IDs: CSCvd06339, CSCvd15698, CSCvd36108, CSCvf52921, CSCvf52930, CSCvf52953, CSCvf52976.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco NX-OS unknown | Versions not published |
References
- tools.cisco.com tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco NX-OS unknown
The 10 CVEs of Cisco NX-OS unknown →
CVE-2018-0306
A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a…
Not rated
CVE-2018-0313
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a…
Not rated
CVE-2018-0295
A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an…
Not rated
CVE-2018-0307
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a…
Not rated