Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4xjv-crqf-4qqv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this vulnerability by bypassing the consent token mechanism with the residual scripts on the affected device. A successful exploit could allow the attacker to escalate from privilege level 15 to root privilege.

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this vulnerability by bypassing the consent token mechanism with the residual scripts on the affected device. A successful exploit could allow the attacker to escalate from privilege level 15 to root privilege.

EPSS

Процентиль: 12%
0.00041
Низкий

Дефекты

CWE-489

Связанные уязвимости

CVSS3: 5.1
nvd
почти 5 лет назад

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this vulnerability by bypassing the consent token mechanism with the residual scripts on the affected device. A successful exploit could allow the attacker to escalate from privilege level 15 to root privilege.

CVSS3: 5.1
fstec
почти 5 лет назад

Уязвимость компонента dragonite операционных систем Cisco IOS XE и Cisco IOS, позволяющая нарушителю повысить свои привилегии до уровня root

EPSS

Процентиль: 12%
0.00041
Низкий

Дефекты

CWE-489