Command injection

2017-07-2519:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

JSON

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-235.

CPENameOperatorVersion
web_security_applianceeq10.1.1-234
web_security_applianceeq10.5.0
web_security_applianceeq10.1.0-204
web_security_applianceeq11.0.0-641
web_security_applianceeq10.1.0
web_security_applianceeq10.1.1-230
web_security_applianceeq11.0.0
web_security_applianceeq10.5.0-358
web_security_applianceeq10.0.0-233
web_security_applianceeq11.0.0-613

Name	Operator	Version
web_security_appliance	eq	10.1.1-234
web_security_appliance	eq	10.5.0
web_security_appliance	eq	10.1.0-204
web_security_appliance	eq	11.0.0-641
web_security_appliance	eq	10.1.0
web_security_appliance	eq	10.1.1-230
web_security_appliance	eq	11.0.0
web_security_appliance	eq	10.5.0-358
web_security_appliance	eq	10.0.0-233
web_security_appliance	eq	11.0.0-613