Path Traversal in Cisco Nx-Os

CVE-2012-4135

Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (38.1th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Nx-os — versions 4.0, 4.0\(0\)n1\(1a\), 4.0\(0\)n1\(2\)
  • N/a — versions n/a

Weakness classification (CWE)

References