CVE-2018-0313

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software (affected versions not specified)

Description: A vulnerability in the NX-API feature could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command-injection exploit. The vulnerability is due to incorrect input validation of user-supplied data to the NX-API subsystem. An attacker could exploit this vulnerability by sending a malicious HTTP or HTTPS packet to the management interface of an affected system that has the NX-API feature enabled. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. Note that NX-API is disabled by default.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.