Количество 3
Количество 3
CVE-2023-20029
A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.
GHSA-m3m3-7pr3-vcp3
A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.
BDU:2023-02297
Уязвимость компонента Meraki операционной системы Cisco IOS XR микропрограммного обеспечения коммутаторов Cisco Catalyst 9200, Cisco Catalyst 9300, позволяющая нарушителю повысить свои привилегии
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2023-20029 A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root. | CVSS3: 4.4 | 0% Низкий | почти 3 года назад | |
GHSA-m3m3-7pr3-vcp3 A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root. | CVSS3: 7.8 | 0% Низкий | почти 3 года назад | |
BDU:2023-02297 Уязвимость компонента Meraki операционной системы Cisco IOS XR микропрограммного обеспечения коммутаторов Cisco Catalyst 9200, Cisco Catalyst 9300, позволяющая нарушителю повысить свои привилегии | CVSS3: 5.6 | 0% Низкий | почти 3 года назад |
Уязвимостей на страницу