CVE:CVE-2018-0337
CNNVD:CNNVD-201806-1118
Cisco NX-OS Software是美国思科（Cisco）公司的一套面向数据中心的操作系统。
Cisco NX-OS Software中的基于角色的访问检测机制存在输入验证漏洞，该漏洞源于程序缺少对文件系统的验证和输入检测。本地攻击者可通过在受影响设备上的CLI中发布特制的命令利用该漏洞执行任意命令。
solution:Upgrade cisco nx-os to a higher version than 7.0(8n1(1,7.1(4n1(1,7.3(1n1(0.6,7.3(2n1(0.350,7.3(1dx(0.119,7.3(3d1(0.2,8.0(0.54s0,8.1(0bd(0.20,8.1(0.9,8.2(0.4s0,8.3(0spg(0.30,8.8(3.5s0,and avoid the version 7.0(8)n1(1),7.1(4)n1(1),7.3(1)n1(0.6),7.3(2)n1(0.350),7.3(1)dx(0.119),7.3(3)d1(0.2),8.0(0.54)s0,8.1(0)bd(0.20),8.1(0.9),8.2(0.4)s0,8.3(0)spg(0.30),8.8(3.5)s0