Логотип exploitDog
bind:CVE-2022-20681
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-20681

Количество 3

Количество 3

nvd логотип

CVE-2022-20681

почти 4 года назад

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges after the user executes certain CLI commands. An attacker could exploit this vulnerability by logging in to an affected device as a low-privileged user and then executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands with level 15 privileges on the affected device.

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-m8cx-f5qj-q68r

почти 4 года назад

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges after the user executes certain CLI commands. An attacker could exploit this vulnerability by logging in to an affected device as a low-privileged user and then executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands with level 15 privileges on the affected device.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2022-03261

почти 4 года назад

Уязвимость компонента CLI операционной системы Cisco IOS XE сетевых устройств Cisco Catalyst 9000 Series, позволяющая нарушителю повысить свои привилегии или выполнить произвольные команды

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-20681

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges after the user executes certain CLI commands. An attacker could exploit this vulnerability by logging in to an affected device as a low-privileged user and then executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands with level 15 privileges on the affected device.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
github логотип
GHSA-m8cx-f5qj-q68r

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges after the user executes certain CLI commands. An attacker could exploit this vulnerability by logging in to an affected device as a low-privileged user and then executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands with level 15 privileges on the affected device.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
fstec логотип
BDU:2022-03261

Уязвимость компонента CLI операционной системы Cisco IOS XE сетевых устройств Cisco Catalyst 9000 Series, позволяющая нарушителю повысить свои привилегии или выполнить произвольные команды

CVSS3: 7.8
0%
Низкий
почти 4 года назад

Уязвимостей на страницу