Command injection

2015-08-2702:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.0%

JSON

The CLI in Cisco Application Control Engine (ACE) 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command’s input, aka Bug ID CSCur23662.

CPENameOperatorVersion
application_control_engine_4700eq<= a5base3.0

CPE	Name	Operator	Version
	application_control_engine_4700	eq	<= a5base3.0

References

tools.cisco.com/security/center/viewAlert.x?alertId=40666

www.securityfocus.com/bid/76491

www.securitytracker.com/id/1033381