Security Advisory

CVE-2020-13122

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-17 15:59:25

Last updated 2024-08-04 12:11:18

Assigner mitre

State PUBLISHED

Description

The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" command. This could be used by a read-only user (monitoring group) or admin to execute commands on the operating system.

← Browse all CVEs View on cve.org ↗