Test ID:	1.3.6.1.4.1.25623.1.0.105109
Category:	CISCO
Title:	Cisco Nexus 1000V Series Switches Arbitrary Command Execution Vulnerability (Cisco-SA-20131115-CVE-2013-5556)
Summary:	A vulnerability in the license installation module of the Cisco; Nexus 1000V could allow an authenticated, local attacker to execute arbitrary shell commands.
Description:	Summary: A vulnerability in the license installation module of the Cisco Nexus 1000V could allow an authenticated, local attacker to execute arbitrary shell commands. Vulnerability Insight: The vulnerability is due to a failure of the install all iso command to properly validate user-supplied input. An attacker could exploit this vulnerability by providing crafted arguments to the install all iso command. To exploit this vulnerability, an attacker would need local access to the targeted device, which decreases the likelihood of a successful exploit. Affected Software/OS: Cisco Nexus 1000V. Solution: See the referenced vendor advisory for a solution. CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5556 Cisco Security Advisory: 20131114 Cisco Nexus 1000V Arbitrary Command Execution Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.