Логотип exploitDog
bind:CVE-2021-1462
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-1462

Количество 3

Количество 3

nvd логотип

CVE-2021-1462

около 1 года назад

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The vulnerability is due to incorrect privilege assignment. An attacker could exploit this vulnerability by logging in to an affected system with an Administrator account and creating a malicious file, which the system would parse at a later time. A successful exploit could allow the attacker to obtain root privileges on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 6.7
EPSS: Низкий
github логотип

GHSA-g2fp-6w5h-9c47

около 1 года назад

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The vulnerability is due to incorrect privilege assignment. An attacker could exploit this vulnerability by logging in to an affected system with an Administrator account and creating a malicious file, which the system would parse at a later time. A successful exploit could allow the attacker to obtain root privileges on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 4.4
EPSS: Низкий
fstec логотип

BDU:2021-01226

почти 5 лет назад

Уязвимость интерфейса командной строки (CLI) веб-интерфейса vManage программно-определяемой сети Cisco SD-WAN, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 4.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-1462

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The vulnerability is due to incorrect privilege assignment. An attacker could exploit this vulnerability by logging in to an affected system with an Administrator account and creating a malicious file, which the system would parse at a later time. A successful exploit could allow the attacker to obtain root privileges on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 6.7
0%
Низкий
около 1 года назад
github логотип
GHSA-g2fp-6w5h-9c47

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The vulnerability is due to incorrect privilege assignment. An attacker could exploit this vulnerability by logging in to an affected system with an Administrator account and creating a malicious file, which the system would parse at a later time. A successful exploit could allow the attacker to obtain root privileges on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 4.4
0%
Низкий
около 1 года назад
fstec логотип
BDU:2021-01226

Уязвимость интерфейса командной строки (CLI) веб-интерфейса vManage программно-определяемой сети Cisco SD-WAN, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 4.4
0%
Низкий
почти 5 лет назад

Уязвимостей на страницу