Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j2cc-65xj-fpxh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

EPSS

Процентиль: 10%
0.00036
Низкий

7.8 High

CVSS3

Дефекты

CWE-269
CWE-284

Связанные уязвимости

CVSS3: 7.8
nvd
больше 4 лет назад

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

CVSS3: 7.8
fstec
больше 4 лет назад

Уязвимость функции управления SSH точек доступа Cisco (AP), позволяющая нарушителю повысить свои привилегии до уровня root

EPSS

Процентиль: 10%
0.00036
Низкий

7.8 High

CVSS3

Дефекты

CWE-269
CWE-284