|
257271
|
6.8 |
MEDIUM
Local
|
cisco
|
nx-os
|
A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vuln…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2017-12342
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257272
|
6.7 |
MEDIUM
Local
|
cisco
|
unified_computing_system nx-os
|
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to…
|
CWE-77
Command Injection
|
CVE-2017-12341
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257273
|
4.2 |
MEDIUM
Local
|
cisco
|
nx-os
|
A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, …
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2017-12340
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257274
|
5.7 |
MEDIUM
Local
|
cisco
|
nx-os lan_switch_software
|
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation…
|
CWE-77
Command Injection
|
CVE-2017-12339
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257275
|
6.0 |
MEDIUM
Local
|
cisco
|
nx-os unified_computing_system lan_switch_software
|
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validati…
|
CWE-20
Improper Input Validation
|
CVE-2017-12338
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257276
|
4.2 |
MEDIUM
Local
|
cisco
|
nx-os unified_computing_system
|
A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain unauthorized access to the unde…
|
CWE-20
Improper Input Validation
|
CVE-2017-12336
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257277
|
6.3 |
MEDIUM
Local
|
cisco
|
nx-os unified_computing_system
|
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation…
|
CWE-77
Command Injection
|
CVE-2017-12335
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257278
|
6.7 |
MEDIUM
Local
|
cisco
|
nx-os unified_computing_system
|
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to…
|
CWE-20
Improper Input Validation
|
CVE-2017-12334
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257279
|
6.7 |
MEDIUM
Local
|
cisco
|
nx-os unified_computing_system
|
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX…
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2017-12333
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257280
|
4.4 |
MEDIUM
Local
|
cisco
|
unified_computing_system nx-os
|
A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations. The vulnerability is due to insufficient restric…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2017-12332
|
2024-11-21 12:09 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|