Lucene search
+L

127 matches found

NVD
NVD
added 2022/06/24 4:15 p.m.72 views

CVE-2022-20828

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance ASA FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerabilit...

9CVSS0.4831EPSS
SaveExploits4References3
Prion
Prion
added 2022/06/24 4:15 p.m.33 views

Design/Logic Flaw

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance ASA FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerabilit...

9CVSS7.3AI score0.4831EPSS
SaveExploits4References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/24 3:25 p.m.30 views

CVE-2022-20828 Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance ASA FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerabilit...

6.5CVSS7.8AI score0.4831EPSS
SaveExploits4References3
CVE
CVE
added 2022/06/24 3:25 p.m.146 views

CVE-2022-20828

CVE-2022-20828 affects Cisco FirePOWER Software for ASA FirePOWER Module. Root cause: CLI parser mishandles undefined parameters, enabling authenticated remote command injection to execute arbitrary commands as root on the FirePOWER OS. Exploitation paths include crafted CLI commands or crafted H...

9CVSS7.3AI score0.4831EPSS
SaveExploits4References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/22 11:00 p.m.16 views

CVE-2022-20828

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance ASA FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerabilit...

9CVSS7.6AI score0.4831EPSS
SaveExploits4References5
Cisco
Cisco
added 2022/06/22 4:00 p.m.252 views

Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance ASA FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerabilit...

6.5CVSS7.3AI score0.4831EPSS
SaveExploits4References1
Tenable Nessus
Tenable Nessus
added 2021/10/19 12:00 a.m.26 views

Cisco IOS XE Software TrustSec CLI Parser DoS (cisco-sa-trustsec-dos-7fuXDR2)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the TrustSec CLI parser that allows an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. ...

7.7CVSS7.3AI score0.01187EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/09/24 12:00 a.m.54 views

Cisco IOS and Cisco IOS XE Software Denial of Service Vulnerability

Cisco IOS and Cisco IOS XE Software are both products of Cisco, a U.S. company. Cisco IOS is a set of operating systems developed for its network devices. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network...

6.8CVSS3.3AI score0.01187EPSS
SaveExploits0Affected Software2
NVD
NVD
added 2021/09/23 3:15 a.m.22 views

CVE-2021-34699

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

7.7CVSS0.01187EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/23 3:15 a.m.6 views

CVE-2021-34699

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

7.7CVSS7.1AI score0.01187EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/23 3:15 a.m.24 views

Design/Logic Flaw

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

6.8CVSS7.4AI score0.01187EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2021/09/23 2:25 a.m.6 views

CVE-2021-34699 Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

7.7CVSS7.3AI score0.01187EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/23 2:25 a.m.91 views

CVE-2021-34699

Cisco IOS and IOS XE TrustSec CLI parser DoS (CVE-2021-34699) arises from an improper interaction between the Web UI and the TrustSec CLI parser, allowing an authenticated, remote attacker to cause an affected device to reload and trigger a DoS. The vulnerability affects Cisco IOS and IOS XE soft...

7.7CVSS7.4AI score0.01187EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/09/22 4:00 p.m.5 views

CVE-2021-34699

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

7.7CVSS7.1AI score0.01187EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/09/22 4:00 p.m.256 views

Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

7.7CVSS7.4AI score0.01187EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/22 12:00 a.m.10 views

Cisco IOS和Cisco IOS XE Software 安全漏洞

Cisco IOS and Cisco IOS XE Software are both products of Cisco, a U.S. company. Cisco IOS is a set of operating systems developed for its network devices. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network...

7.7CVSS7.4AI score0.01187EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/09/22 12:00 a.m.24 views

PT-2021-4320 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the TrustSec CLI parser could allow an authenticated, remote attacker to cause an affected device to reload due to an improper interaction...

7.8CVSS7.4AI score0.01187EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/02/05 12:00 a.m.30 views

Cisco IOS XR Software Unauthorized Information Disclosure (cisco-sa-ios-infodisc-4mtm9Gyt)

According to its self-reported version, IOS-XR is affected by an information disclosure vulnerability in its CLI parser component due to insufficient application of restrictions for a specific command. An authenticated, local attacker can exploit this, by issuing a crafted command at the command...

5.5CVSS5.7AI score0.00343EPSS
SaveExploits0References3
NVD
NVD
added 2021/02/04 5:15 p.m.38 views

CVE-2021-1128

A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit...

5.5CVSS0.00343EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/04 5:15 p.m.22 views

Design/Logic Flaw

A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit...

2.1CVSS5.4AI score0.00343EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder