CVE-2019-1753 Cisco IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated but unprivileged level 1, remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to a failure to validate and sanitize input in Web Services Management Agent WSMA...

И еще одна проблема в Cisco IOS

По команде show в не-enable режиме тем не менее доступны многие команды, документированные как команды enable-режима, например show access-list...