CVEvulnerability

CVE-2015-4237

4.6 MEDIUM Published 2015-07-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-07-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264, CWE-78

Description

The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and CSCuv08436.

Affected configurations

• cisco nx-os 7.2\(0\)zz\(99.3\) • cisco nx-os 7.2\(0\)zz\(99.1\) • cisco nx-os 6.2\(11b\) • cisco nx-os 9.1\(1\)sv1\(3.1.8\) • cisco nx-os 6.2\(12\) • cisco nx-os 4.1\(2\)e1\(1\)

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References