CVE-2017-12785 in NoviWareinformación

Resumen

por MITRE

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user (monitor role) to gain privileged (root) code execution on the switch via command injection.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2017-08-10

Divulgación

2017-08-22

Moderación

aceptado

Artículo

VDB-105646

CPE

listo

Explotación

Descargar

EPSS

0.15988

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-12785
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-12785
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-12785/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!