CVE-2017-12330

CVE-2017-12330 affects Cisco NX-OS System Software by a CLI command-injection vulnerability caused by insufficient input validation of command arguments to the CLI parser. An authenticated, local attacker could inject crafted arguments via vulnerable CLI commands to execute arbitrary commands wit...

CVE-2017-12333

CVE-2017-12333 : Cisco NX-OS System Software contains a vulnerability that allows an authenticated, local attacker to bypass signature verification when loading a software image due to insufficient NX-OS signature verification. Affected products include Multilayer Director Switches, Nexus 7000 Se...

CVE-2017-12354

A vulnerability in the web-based interface of Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect system software version...

CVE-2017-12349

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting XSS attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs:...

CVE-2017-12372

CVE-2017-12372 is a Cisco WebEx Network Recording Player remote code execution vulnerability in ARF/WRF playback. The flaw allows a remote attacker to cause the affected WebEx players to crash and, in the worst case, execute arbitrary code on the user’s system when a malicious ARF or WRF file is ...

CVE-2017-12331

CVE-2017-12331 affects Cisco NX-OS System Software on Multilayer Director Switches, Nexus 7000/7700 Series, and UCS Manager. Root cause: insufficient NX-OS signature verification for software patches. An authenticated, local attacker with valid administrator credentials could bypass signature ver...

CVE-2017-12356

A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...

CVE-2017-12370

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12360

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...

CVE-2017-12340

CVE-2017-12340 affects Cisco NX-OS System Software on Cisco MDS Multilayer Director Switches, Nexus 7000, and Nexus 7700 series. The flaw is due to insufficient sanitization of user-supplied parameters in the Python scripting sandbox, enabling an authenticated, local attacker to escape the sandbo...

CVE-2017-12366

Cisco WebEx Meeting Center is affected by CVE-2017-12366 through insufficient input validation of parameters sent to the web server, enabling an unauthenticated, remote attacker to perform cross-site scripting (XSS). Exploitation requires convincing a user to follow a malicious link or intercepti...

CVE-2017-12365

CVE-2017-12365 affects Cisco WebEx Event Center. A design flaw allows an authenticated, remote attacker to query the Event Center site and view both listed and unlisted meetings, enabling potential attendance of meetings not accessible to them. Root cause is a information-disclosure design weakne...

CVE-2017-12341

CVE-2017-12341 affects Cisco NX-OS System Software CLI. The issue arises from insufficient input validation during patch image installation, allowing an authenticated local attacker with valid admin credentials to execute arbitrary commands as root prior to patch activation. Affected platforms in...

CVE-2017-12357

The CVE-2017-12357 issue affects Cisco Unified Communications Manager (CUCM) web-based administration interface. The vulnerability stems from improper validation of user-supplied input in the web UI, enabling an authenticated, remote attacker to persuade a user to click a crafted link and trigger...

CVE-2017-12347

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12336

CVE-2017-12336 describes a local, authenticated exploitation of the TCL scripting subsystem in Cisco NX-OS System Software. The issue arises from insufficient input validation of user-supplied files passed to the interactive TCL shell, allowing an attacker with administrative or tclsh privileges ...

CVE-2017-12336

A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient input validati...

CVE-2017-12332

A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations. The vulnerability is due to insufficient restrictions in the patch installation process. An attacker could exploit this vulnerability by installin...

CVE-2017-12335

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command...

CVE-2017-12334

Cisco NX-OS System Software CLI Command Injection vulnerability (CVE-2017-12334) affects multiple Cisco NX-OS platforms (e.g., Multilayer Director Switches, Nexus 2000/3000/3500/5000/5500/5600/6000/7000/7700/9000 series and UCS Manager). Root cause: insufficient input validation of CLI command ar...