CVE-2017-12785

CVE-2017-12785 describes a critical buffer overflow vulnerability in the novish command-line interface, specifically within the "show log cli" command, affecting NoviWare software distributions up to NW400.2.6 deployed on NoviSwitch devices. This flaw allows a read-only user (monitor role) to achieve privileged (root) code execution on the switch through command injection. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit (EDB-42518) is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.