According to its self-reported version, Cisco NX-OS Software is affected by two command injection vulnerabilities due to insufficient validation of arguments passed to certain CLI commands. An authenticated, local attacker could exploit these vulnerabilities to execute arbitrary commands on the underlying operating system with elevated privileges.

Please see the included Cisco BID and Cisco Security Advisory for more information.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Cisco NX-OS Software Multiple Vulnerabilities (cisco-sa-20190515-nxos-cmdinj-1774-1775)

medium Nessus Plugin ID 130916

Version 1.7