Arbitrary Command Execution in Cisco Nexus 1000V Switches for VMware and Microsoft Hyper-V
CVE-2013-5556

Currently unrated

Key Information:

Vendor
Cisco
Status
Nexus 1000v
Vendor
CVE Published:
18 November 2013

Summary

The license-installation module in Cisco Nexus 1000V Switches allows local users to exploit crafted 'install all iso' arguments to gain elevated privileges. This vulnerability can lead to the execution of arbitrary commands on affected devices, potentially compromising their integrity and security.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.