Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-53jq-vx9c-hw74

Опубликовано: 23 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executing vulnerable CLI commands using a malicious payload. A successful exploit could allow the attacker to elevate privileges to root on an affected device.

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executing vulnerable CLI commands using a malicious payload. A successful exploit could allow the attacker to elevate privileges to root on an affected device.

EPSS

Процентиль: 7%
0.00026
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6
nvd
больше 3 лет назад

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executing vulnerable CLI commands using a malicious payload. A successful exploit could allow the attacker to elevate privileges to root on an affected device.

CVSS3: 6.7
fstec
больше 3 лет назад

Уязвимость интерфейса командной строки (CLI) платформы аналитики и автоматизации работы с многооблачными сетями дата-центров Cisco Nexus Dashboard, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 7%
0.00026
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-20