Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wfmg-82gp-4v96

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command. An attacker could exploit this vulnerability by including malicious input during the execution of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as root.

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command. An attacker could exploit this vulnerability by including malicious input during the execution of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as root.

EPSS

Процентиль: 38%
0.00164
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-20
CWE-78

Связанные уязвимости

CVSS3: 6.7
nvd
около 6 лет назад

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command. An attacker could exploit this vulnerability by including malicious input during the execution of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as root.

CVSS3: 6.7
fstec
около 6 лет назад

Уязвимость системы управления сетью Cisco Digital Network Architecture (DNA) Center, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

EPSS

Процентиль: 38%
0.00164
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-20
CWE-78