Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-20050
HistoryFeb 23, 2023 - 8:15 p.m.

Input validation

2023-02-2320:15:00
PRIOn knowledge base
www.prio-n.com
8
cisco
nx-os
software
cli
vulnerability
input validation
arbitrary commands
operating system
crafted input
exploit
privileges
user.

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.

CPENameOperatorVersion
nx-oseq< 8.29
nx-oseq< 9.310
nx-oseq< 10.24

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Related for PRION:CVE-2023-20050