Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m3m3-7pr3-vcp3

Опубликовано: 23 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.

EPSS

Процентиль: 7%
0.00026
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 4.4
nvd
почти 3 года назад

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.

CVSS3: 5.6
fstec
почти 3 года назад

Уязвимость компонента Meraki операционной системы Cisco IOS XR микропрограммного обеспечения коммутаторов Cisco Catalyst 9200, Cisco Catalyst 9300, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 7%
0.00026
Низкий

7.8 High

CVSS3