Vulnerabilities > Cisco > LAN Switch Software

DATE CVE VULNERABILITY TITLE RISK
2017-11-30 CVE-2017-12339 Command Injection vulnerability in Cisco LAN Switch Software and Nx-Os
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack.
local
low complexity
cisco CWE-77
5.7
2017-11-30 CVE-2017-12338 Improper Input Validation vulnerability in Cisco products
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files.
local
low complexity
cisco CWE-20
6.0