Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4hhj-h38j-ccw8

Опубликовано: 12 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device.

The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device.

The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.

EPSS

Процентиль: 5%
0.00021
Низкий

6 Medium

CVSS3

Дефекты

CWE-250

Связанные уязвимости

CVSS3: 6
nvd
больше 2 лет назад

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.

CVSS3: 6
fstec
больше 2 лет назад

Уязвимость программного обеспечения серверов Cisco BroadWorks, существующая из-за непринятия мер по нейтрализации специальных элементов, позволяющая нарушителю повысить свои привилегии до уровня root

EPSS

Процентиль: 5%
0.00021
Низкий

6 Medium

CVSS3

Дефекты

CWE-250