Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-467q-fpqj-82rx

Опубликовано: 16 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

EPSS

Процентиль: 33%
0.00129
Низкий

7.8 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.8
nvd
почти 4 года назад

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

CVSS3: 7.8
fstec
почти 4 года назад

Уязвимость компонента CLI микропрограммного обеспечения маршрутизаторов Cisco SD-WAN, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 33%
0.00129
Низкий

7.8 High

CVSS3

Дефекты

CWE-284