CVE-2017-6719

Опубликовано: 04 июл. 2017

Источник: nvd

CVSS3: 6.7

CVSS2: 7.2

EPSS Низкий

Описание

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges, aka Command Injection. More Information: CSCvb99406. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.1.28i.BASE 6.2.1.22i.BASE 6.1.32.8i.BASE 6.1.31.3i.BASE 6.1.3.10i.BASE.

Ссылки

http://www.securityfocus.com/bid/99213
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038741
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios
Vendor Advisory
http://www.securityfocus.com/bid/99213
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038741
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios_xr:6.0.2:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.0.2.01:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00154

Низкий

6.7 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-ghq9-xp8j-4pwc

CVSS3: 6.7

github

больше 3 лет назад

BDU:2017-01645

fstec

больше 8 лет назад

Уязвимость компонента CLI операционной системы Cisco IOS, позволяющая нарушителю выполнить произвольные команды