CVE-2020-13122 | BDVDB-2026-140331 Detail

Description#

The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" command. This could be used by a read-only user (monitoring group) or admin to execute commands on the operating system.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://drive.google.com/file/d/1iL4cc0ZbQK9s190DbFQD7mWYbBH-vlJb/view?usp=sharing

Exploit#

No public exploit known

History#

Version 12020-08-17Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.