A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.
oryginał ENCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HCisco Asyncos
OSCisco11.7.0-40611.7.0-41811.7.1-00611.7.1-02011.7.1-04911.7.2-01111.8.0-41411.8.1-02311.8.3-01811.8.3-02112.0.1-26812.0.3-00712.5.1-01112.5.2-00712.5.4-005+ 12 więcejCisco Secure Web Appliance S196
HWCiscowszystkie wersjeCisco Secure Web Appliance S396
HWCiscowszystkie wersjeCisco Secure Web Appliance S696
HWCiscowszystkie wersjeCisco Secure Web Appliance Virtual S1000v
APPCiscowszystkie wersjeCisco Secure Web Appliance Virtual S100v
APPCiscowszystkie wersjeCisco Secure Web Appliance Virtual S300v
APPCiscowszystkie wersjeCisco Secure Web Appliance Virtual S600v
APPCiscowszystkie wersje
Powiązane podatności
RCE z uprawnieniami root w Cisco Secure Email Gateway i Secure Email and Web Manager
A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco...
A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (...
A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an un...
A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for ...