Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m8cx-f5qj-q68r

Опубликовано: 16 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges after the user executes certain CLI commands. An attacker could exploit this vulnerability by logging in to an affected device as a low-privileged user and then executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands with level 15 privileges on the affected device.

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges after the user executes certain CLI commands. An attacker could exploit this vulnerability by logging in to an affected device as a low-privileged user and then executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands with level 15 privileges on the affected device.

EPSS

Процентиль: 31%
0.00116
Низкий

7.8 High

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 7.8
nvd
почти 4 года назад

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges after the user executes certain CLI commands. An attacker could exploit this vulnerability by logging in to an affected device as a low-privileged user and then executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands with level 15 privileges on the affected device.

CVSS3: 7.8
fstec
почти 4 года назад

Уязвимость компонента CLI операционной системы Cisco IOS XE сетевых устройств Cisco Catalyst 9000 Series, позволяющая нарушителю повысить свои привилегии или выполнить произвольные команды

EPSS

Процентиль: 31%
0.00116
Низкий

7.8 High

CVSS3

Дефекты

CWE-266