Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-11-30	CVE-2017-12339	Command Injection vulnerability in Cisco LAN Switch Software and Nx-Os A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. local low complexity cisco CWE-77	5.7
2017-11-30	CVE-2017-12338	Improper Input Validation vulnerability in Cisco products A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. local low complexity cisco CWE-20	6.0