CVE-2020-13122

The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in…

published August 17, 2020

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" command. This could be used by a read-only user (monitoring group) or admin to execute commands on the operating system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07116 · 94.2th percentile
Published
2020-08-17T15:59Z
EPSS history
Timeline
  • 17 AUG 15:59Z
    The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in…
    cvelistv5