Lucene search
K

11 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/15 4:11 p.m.2 views

CVE-2026-20136

A vulnerability in the CLI of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underlying operating system and elevate privileges to root. Th...

6CVSS5.8AI score0.00533EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/04 6:34 p.m.5 views

CVE-2026-20016

A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attack...

6CVSS6.2AI score0.00182EPSS
Exploits0References1
NVD
NVD
added 2026/03/04 6:16 p.m.7 views

CVE-2026-20063

A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device. This...

6CVSS0.00188EPSS
Exploits0References1
CVE
CVE
added 2026/03/04 5:41 p.m.11 views

CVE-2026-20017

Cisco Secure FTD Software CLI contains a vulnerability due to insufficient input validation of user-supplied CLI arguments. An authenticated, local attacker with valid admin credentials could execute arbitrary OS commands as root. Impact is privilege escalation with potential for high confidentia...

6CVSS6.2AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/08/16 12:0 a.m.3 views

Cisco ThousandEyes Enterprise Agent 安全漏洞

Cisco ThousandEyes Enterprise Agent is an application from Cisco, Inc. provides extended visibility, automated insights, and seamless workflow. A security vulnerability exists in Cisco ThousandEyes Enterprise Agent that stems from insufficient input validation to the CLI, which could allow an...

5.5CVSS5.6AI score0.00304EPSS
Exploits2References6
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.6 views

Cisco Secure Email 操作系统命令注入漏洞

Cisco Secure Email is Cisco's Cisco Secure Email formerly Email Security provides optimal protection for your email from cyber threats. A security vulnerability exists in Cisco Secure Email Gateway that stems from incorrect input validation in the CLI, which can be exploited by an attacker to...

6.7CVSS7.3AI score0.00362EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/11/09 12:0 a.m.2 views

Cisco Firepower Threat Defense和Cisco FXOS Software 操作系统操作系统命令注入漏洞

Cisco Firepower Threat Defense FTD and Cisco FXOS Software are both products of Cisco, Inc. Cisco Firepower Threat Defense is a unified suite of software that provides next-generation firewall services.Cisco FXOS Cisco FXOS Software is a suite of firewall software that runs in Cisco security...

6.7CVSS7AI score0.00279EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/09/28 4:0 p.m.3 views

CVE-2022-20850

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit...

7.1CVSS7.2AI score0.00195EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/04/28 12:0 a.m.2 views

PT-2021-2833 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to insufficient input validation of commands supplied by the user in the CLI of t...

7.2CVSS6.6AI score0.00481EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2020/09/24 12:0 a.m.3 views

PT-2020-4424 · Cisco +1 · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the application-hosting subsystem could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execu...

7.8CVSS7.7AI score0.00342EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2020/04/29 12:0 a.m.5 views

PT-2020-2649 · Cisco · Cisco Ios Xe Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software affected versions not specified Description: The issue is related to insufficient input validation in the CLI interface of the software. This could allow an authenticated, local attacker to inject arbitrary comman...

7.8CVSS7.4AI score0.00375EPSS
Exploits0References6
Rows per page
Query Builder