Cisco Advanced Media Gateway Code Execution Root Privilege

The vulnerability of the web-based framework of the microprogramming software for Cisco Advanced Media Gateways is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with privileges of the...

Cisco TelePresence IP Gateway Privilege Escalation

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence IP Gateways is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with privileges of th...

Cisco TelePresence MCU Root Privilege Execution

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence MCU control devices is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with privileg...

Cisco Expressway Access

The vulnerability of the management interface for Microprogramming Software in Cisco Expressway is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device using a specially crafted user name...

Hospira Lifecare PCA Device Control

The vulnerability of Hospira Lifecare PCA medical equipment’s microprogramming software lies in the lack of authentication when connecting via Telnet protocol on port 23. Exploiting this vulnerability can allow a malicious actor to gain control over the device remotely...

Cisco Nexus 1000V Bypass Security

The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...

Cisco ACS RCE

The vulnerability of the ACS View interface allows a remote authenticated user with administrator privileges to execute arbitrary SQL commands using specially crafted HTTPS requests...