ID de Prueba:	1.3.6.1.4.1.25623.1.0.105109
Categoría:	CISCO
Título:	Cisco Nexus 1000V Series Switches Arbitrary Command Execution Vulnerability (Cisco-SA-20131115-CVE-2013-5556)
Resumen:	A vulnerability in the license installation module of the Cisco; Nexus 1000V could allow an authenticated, local attacker to execute arbitrary shell commands.
Descripción:	Summary: A vulnerability in the license installation module of the Cisco Nexus 1000V could allow an authenticated, local attacker to execute arbitrary shell commands. Vulnerability Insight: The vulnerability is due to a failure of the install all iso command to properly validate user-supplied input. An attacker could exploit this vulnerability by providing crafted arguments to the install all iso command. To exploit this vulnerability, an attacker would need local access to the targeted device, which decreases the likelihood of a successful exploit. Affected Software/OS: Cisco Nexus 1000V. Solution: See the referenced vendor advisory for a solution. CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5556 Cisco Security Advisory: 20131114 Cisco Nexus 1000V Arbitrary Command Execution Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.