CVE-2012-4076

Cisco NX-OS - Local Privilege Escalation via Shell Metacharacter Injection in System Library Function

Title source: llm
STIX 2.1

Description

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/98126
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/87678
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/55205
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/62848

Scores

EPSS 0.0032
EPSS Percentile 24.0%

Details

CWE
CWE-20
Status published
Products (1)
cisco/nx-os
Published Oct 14, 2013
Tracked Since Feb 18, 2026