48 matches found
CVE-2016-6373
The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...
Design/Logic Flaw
The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...
CVE-2016-6374: Improper Input Validation
Cisco Cloud Services Platform CSP 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093...
CVE-2016-6373: Improper Neutralization of Special Elements used in an OS Command
The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...
PT-2016-6855
Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform CSP 2100 version 2.0 Description The issue allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request. Recommendations For Cisco Cloud Services Platform CSP 2100 version...
PT-2016-6854
Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform CSP 2100 version 2.0 Description The issue allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands. Recommendations For Cisco Cloud Services Platform CSP...
Cisco Cloud Services Platform 2100 Remote Command Execution Vulnerability
A vulnerability in the web interface of Cisco Cloud Services Platform CSP 2100 could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient sanitization of specific values received as part of a user-supplied HTTP request...
Cisco Cloud Services Platform 2100 Command Injection Vulnerability
A vulnerability in the web-based GUI of the Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system with the privileges of the root user. The vulnerability is due to insufficient sanitization of user-supplie...