Cisco RVS4000/WRVS4400N/WAP4410N设备测试接口远程特权提升漏洞

BUGTRAQ ID：64776 CVE ID：CVE-2014-0659 Cisco RVS4000/WRVS4400N/WAP4410N是思科公司发行的无线路由器和无线AP。 Cisco WAP4410N Wireless-N Access Point, Cisco WRVS4400N Wireless-N Gigabit Security Router和Cisco RVS4000 4-port Gigabit Security Router产品存在安全漏洞，允许未验证远程攻击者获得对设备的root级的访问。 漏洞是由于受影响设备在TCP...

CVE-2014-0659: Improper Neutralization of Special Elements used in an OS Command

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests...