Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5rf9-q3f5-rc77

Опубликовано: 01 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary file path information when using commands in the CLI of an affected device. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device.

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary file path information when using commands in the CLI of an affected device. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device.

EPSS

Процентиль: 17%
0.00056
Низкий

7.1 High

CVSS3

Дефекты

CWE-20
CWE-22

Связанные уязвимости

CVSS3: 5.5
nvd
больше 3 лет назад

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary file path information when using commands in the CLI of an affected device. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device.

CVSS3: 5.5
fstec
больше 3 лет назад

Уязвимость интерфейса командной строки (CLI) программного обеспечения Cisco IOS XE SD-WAN, позволяющая нарушителю удалить произвольные файлы в файловой системе

EPSS

Процентиль: 17%
0.00056
Низкий

7.1 High

CVSS3

Дефекты

CWE-20
CWE-22