RCE in Cisco Nx-Os

CVE-2012-4075

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.005 (36.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Nx-os
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_XF)