The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and…
The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" command.