Design/Logic Flaw

2017-06-1306:29:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.2%

JSON

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0.

CPENameOperatorVersion
context_service_development_kiteq2.0

CPE	Name	Operator	Version
	context_service_development_kit	eq	2.0

References

www.securityfocus.com/bid/98978

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ccs