Lucene search
+L

1857 matches found

ATTACKERKB
ATTACKERKB
added 2021/05/05 4:0 p.m.5 views

CVE-2021-1447

A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management Appliance SMA could allow an authenticated, local attacker to elevate their privileges to root. This vulnerability is due to a procedural flaw in the password generation algorithm. An...

7.2CVSS7AI score0.00275EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/05/05 12:0 a.m.10 views

Cisco SD-WAN vManage 操作系统命令注入漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage has an operating system command injection vulnerability that can be exploited by a local attacker to inject arbitrary...

7.8CVSS6.3AI score0.00325EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/05/05 12:0 a.m.7 views

PT-2021-3256 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected...

6CVSS4.7AI score0.00229EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/04/28 4:0 p.m.4 views

CVE-2021-1448

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is running in multi-instance mode. This vulnerability is due to...

7.8CVSS7.5AI score0.00302EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/04/14 12:0 a.m.8 views

The vulnerability of the command-line interface (CLI) of the JunOS operating system for routers of the EX2300 and EX3400 series, which allows a attacker to cause service interruptions.

The vulnerability of the command-line interface CLI of the JunOS operating system for EX2300 and EX3400 routers is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.5CVSS5.9AI score0.00339EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/04/13 4:15 p.m.5 views

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

9.8CVSS7.3AI score0.01002EPSS
SaveExploits0References1
Fedora
Fedora
added 2021/04/06 1:4 a.m.41 views

[SECURITY] Fedora 33 Update: mediaconch-18.03.2-17.fc33

MediaConch is an implementation checker, policy checker, reporter, and fixer that targets preservation-level audiovisual files specifically Matroska, Linear Pulse Code Modulation LPCM and FF Video Codec 1 FFV1. This project is maintained by MediaArea and funded by PREFORMA. This package includes...

7.5CVSS3.4AI score0.04238EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.8 views

The vulnerability of the CLI component in Cisco IOS XE routers for Cisco IOS XE SD-WAN allows a attacker to gain access to the basic operating system with superuser privileges.

The vulnerability of Cisco IOS XE operating system routers in Cisco IOS XE SD-WAN devices exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the basic operating system with superuser privileges...

6.8CVSS6.7AI score0.00592EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2021/04/06 12:0 a.m.18 views

Fedora: Security Advisory for mediaconch (FEDORA-2021-3b67623d93)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.04238EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.5 views

The vulnerability of the command-line interface of Cisco Aironet Access Point microprogramming software allows a attacker to access, modify, add, or delete data.

The vulnerability of the command-line interface of Cisco Aironet Access Point software relates to deficiencies in the system’s controlled area segmentation. Exploiting this vulnerability could allow an attacker to access, modify, add, or delete data...

4.6CVSS6.1AI score0.0023EPSS
SaveExploits0References2Affected Software9
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.10 views

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows attackers to compromise the integrity of protected information.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...

4.6CVSS6.6AI score0.0023EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.10 views

The vulnerability of the Cisco IOS XE SD-WAN’s command-line interface allows a hacker to elevate their privileges to the root level.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface is related to resource management errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the underlying operating system...

5.2CVSS7.1AI score0.00275EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/05 12:0 a.m.11 views

The vulnerability of the command-line interface (CLI) of Cisco IOS XE and Cisco IOS operating systems allows a attacker to obtain the password for the Common Industrial Protocol (CIP) and reconfigure the device.

The vulnerability of the command-line interface CLI of Cisco IOS XE and Cisco IOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to obtain the password for the Common Industrial Protocol CIP and reconfigure the...

7.8CVSS7.1AI score0.0022EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2021/03/30 12:0 a.m.11 views

Aruba Instant Command Injection Vulnerability (CNVD-2021-26046)

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

9CVSS7.9AI score0.02722EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/30 12:0 a.m.11 views

Aruba Instant Arbitrary File Modification Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via a command line interface to overwrite arbitrary files with content under their control...

8.5CVSS6.9AI score0.0091EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/29 12:0 a.m.7 views

Aruba Access Points 操作系统命令注入漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

9CVSS6.1AI score0.02722EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/03/29 12:0 a.m.9 views

Aruba Access Points 输入验证错误漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via a command line interface to overwrite arbitrary files with content under their control...

8.5CVSS5.9AI score0.0091EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/03/29 12:0 a.m.9 views

Aruba Access Points 命令注入漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

9CVSS6.1AI score0.02722EPSS
SaveExploits0References5
OSV
OSV
added 2021/03/24 9:15 p.m.7 views

CVE-2021-1281

A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system as the root user. This vulnerability is due to the way the software handles concurrent CLI sessions. An attacker could exploit this vulnerabilit...

6.7CVSS6.7AI score0.00275EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/24 8:15 p.m.4 views

CVE-2021-1383

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these...

6.7CVSS6.8AI score
SaveExploits0References2
Rows per page
Query Builder