Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5mpw-67fp-pg56

Опубликовано: 20 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

EPSS

Процентиль: 9%
0.00033
Низкий

7.3 High

CVSS3

Дефекты

CWE-708

Связанные уязвимости

CVSS3: 6.7
nvd
около 3 лет назад

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

CVSS3: 6.7
fstec
около 3 лет назад

Уязвимость облачного агента службы технической поддержки клиентов Cisco CX Cloud Agent, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии и получить полный контроль над устройством

EPSS

Процентиль: 9%
0.00033
Низкий

7.3 High

CVSS3

Дефекты

CWE-708