Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-47pc-xw4x-49cm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.4

Описание

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.

EPSS

Процентиль: 36%
0.00154
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 4.4
nvd
больше 6 лет назад

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.

CVSS3: 4.4
fstec
больше 6 лет назад

Уязвимость интерфейса командной строки (CLI) микропрограммного обеспечения устройства управления конференц-связью Cisco TelePresence Collaboration Endpoint (CE), позволяющая нарушителю записывать произвольные файлы в корневую директорию

EPSS

Процентиль: 36%
0.00154
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-276