CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: a vulnerability in the cli of cisco nx-os system software 7.1 through 7.3 running on cisco nexus series switches could allow an authenticated, local attacker to perform a command injection attack. the vulnerability is due to insufficient input validation of command arguments. an attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable cli command. an exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. cisco bug ids: cscvb86787, cscve60516, cscve60555.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-05-22
Last Modified Date: 2019-10-03