Riskcovery

CVE-2018-0324

State
Published
Severity
Not scored
Published
May 17, 2018
Updated
Nov 29, 2024
Reserved
Nov 27, 2017

Read the record on cve.org

Description

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, high-privileged, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters in the CLI parser. An attacker could exploit this vulnerability by invoking a vulnerable CLI command with crafted malicious parameters. An exploit could allow the attacker to execute arbitrary commands with a non-root user account on the underlying Linux operating system of the affected device. Cisco Bug IDs: CSCvi09723.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
Cisco Enterprise NFV Infrastructure Softwaren/a
  • Cisco Enterprise NFV Infrastructure SoftwareAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.