Design/Logic Flaw

Unspecified vulnerability in the tech support diagnostic shell in Cisco Application Extension Platform AXP 1.1 and 1.1.5 allows local users to obtain sensitive configuration information and gain administrator privileges via unspecified API calls...

CVE-2010-1572

CVE-2010-1572 affects Cisco Application Extension Platform (AXP) versions 1.1 and 1.1.5 (upgraded from 1.1) on Cisco ISRs. A privilege escalation exists in the tech support diagnostic shell: an authenticated AXP user can use the API to execute commands and obtain complete administrative access, r...