CSCwj94682 - Cisco NX-OS Software CLI Command Injection Vulnerability

[tomeq82]

Isn't that vulnerability not vulnerability at all on N7K or N77K ? If you're authenticated as admin, then you can easily switch to shell and execute root level commands. You can also execute scripts with root privileges, so why does it list N7K and N77K? What is vulnerable then?

[marce1000]

    - I don't understand the question ; however from https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj94682
   >...
   >Symptom
   >...
   >... * Nexus 3000 Series Switches
         * Nexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later
         * Nexus 9000 Series Switches in standalone NX-OS mode

  There is a clear overview of models affected ,

 M.

[tomeq82]

Do I ask about the models in question? I have listed them.

[marce1000]

   - Note that if you talk about N77K , they probably incorporated that too in the bug report or assumed it would be understood in that way ,

  M.