Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r9vq-672r-f8rf

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0.

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0.

EPSS

Процентиль: 87%
0.03348
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9.8
nvd
больше 8 лет назад

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0.

fstec
больше 8 лет назад

Уязвимость механизма обновления динамического файла JAR набора средств разработки облачного сервиса Сontext Service Software Development Kit, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 87%
0.03348
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20