Multiple Cisco Products CVE-2017-6649 Local Command Injection Vulnerability

Bugtraq ID:	98531
Class:	Input Validation Error
CVE:	CVE-2017-6649
Remote:	No
Local:	Yes
Published:	May 17 2017 12:00AM
Updated:	May 17 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco SAN-OS Software 0 Cisco Nexus 5000 Series Switches 0 Cisco Mds 9000 Nx-Os -
Not Vulnerable:

Multiple Cisco Products CVE-2017-6649 Local Command Injection Vulnerability

Multiple Cisco Products are prone to a local command-injection vulnerability.

A local attacker can exploit this issue to execute arbitrary commands.

This issue being tracked by Cisco Bug ID CSCvb86787.

Multiple Cisco Products CVE-2017-6649 Local Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Cisco Products CVE-2017-6649 Local Command Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco Products CVE-2017-6649 Local Command Injection Vulnerability

References:

• Cisco Homepage (Cisco)
  
• cisco-sa-20170517-nss: Cisco Nexus 5000 Series Switches CLI Command Injection V (Cisco)