Cisco IOS XE Software 路径遍历漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A path traversal vulnerability exists in Cisco IOS XE. Multiple vulnerabilities can b...

PT-2022-2851 · Cisco · Cisco Iox +2

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operati...

Cisco IOS XE Software 跨站脚本漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A cross-site scripting vulnerability exists in Cisco IOS XE. An attacker exploits thi...

Cisco IOS XE Software 路径遍历漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A path traversal vulnerability exists in Cisco IOS XE. An attacker exploits this...

Cisco IOS XE 路径遍历漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE. An attacker exploited the...

Cisco IOS XE Software 操作系统命令注入漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. An operating system command injection vulnerability exists in Cisco IOS XE. Multiple...

Siemens RUGGEDCOM ROX Information Disclosure Vulnerability

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

Unspecified Vulnerability in Siemens RUGGEDCOM ROX

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

CVE-2021-1384

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages...

CVE-2021-1384

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages...

CVE-2021-1385

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the devic...

CVE-2021-1384

Summary of vulnerability details : CVE-2021-1384 affects Cisco IOx in Cisco IOS XE Software, enabling an authenticated, remote attacker to inject commands into the underlying OS as root. The root cause is incomplete validation of fields in application packages loaded onto IOx, exploitable by load...

CVE-2021-1385

CVE-2021-1385 affects the Cisco IOx Application Hosting Environment across multiple Cisco platforms. The root cause is improper URI validation in IOx API requests, enabling an authenticated, remote attacker to perform directory traversal and read/write files on the underlying OS/host. Impact is r...

PT-2021-2495 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to inject commands into the underlying operating system as the...

Modernize secure access for your on-premises resources with Zero Trust

Change came quickly in 2020. More likely than not, a big chunk of your workforce has been forced into remote access. And with remote work came an explosion of bring-your-own-device BYOD scenarios, requiring your organization to extend the bounds of your network to include the entire internet and...

Cisco IOS XE Software IOx Application Hosting Privilege Escalation (cisco-sa-iosxe-iox-app-host-mcZcnsBt)

According to its self-reported version, Cisco IOS XE Software is affected by a privilege escalation vulnerability in the application-hosting subsystem due to incomplete input validation of the user payload of CLI commands and improper role-based access control when commands are issued at the...

CVE-2020-3393

A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the...

CVE-2020-3393

A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the...

CVE-2020-3393 Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability

A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the...

CVE-2020-3393 Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability

A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the...