Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jx7x-rhq6-mfr6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the CLI of Cisco Network Services Orchestrator (NSO) could allow an authenticated, local attacker to access confidential information on an affected device. The vulnerability is due to a timing issue in the processing of CLI commands. An attacker could exploit this vulnerability by executing a specific sequence of commands on the CLI. A successful exploit could allow the attacker to read configuration information that would normally be accessible to administrators only.

A vulnerability in the CLI of Cisco Network Services Orchestrator (NSO) could allow an authenticated, local attacker to access confidential information on an affected device. The vulnerability is due to a timing issue in the processing of CLI commands. An attacker could exploit this vulnerability by executing a specific sequence of commands on the CLI. A successful exploit could allow the attacker to read configuration information that would normally be accessible to administrators only.

EPSS

Процентиль: 19%
0.00061
Низкий

Связанные уязвимости

CVSS3: 4.7
nvd
больше 5 лет назад

A vulnerability in the CLI of Cisco Network Services Orchestrator (NSO) could allow an authenticated, local attacker to access confidential information on an affected device. The vulnerability is due to a timing issue in the processing of CLI commands. An attacker could exploit this vulnerability by executing a specific sequence of commands on the CLI. A successful exploit could allow the attacker to read configuration information that would normally be accessible to administrators only.

CVSS3: 4.7
fstec
больше 5 лет назад

Уязвимость интерфейса командной строки (CLI) программного средства автоматизации Cisco Network Services Orchestrator, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 19%
0.00061
Низкий