CVE-2021-1383

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these...

CVE-2021-1434

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system. This vulnerability is due to insufficient validation of the parameters of a specific CLI command. An attacker could exploit this...

PT-2021-2494

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the command-line interface of the software, allowing an authenticated, local attacker to condu...

Cisco IOS XE SD-WAN Software 安全漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary file overwrite vulnerability exists in the CLI for SD-WAN for Cisco IOS XE. The vulnerability stems from insufficient validation of parameters for specific CLI...

Cisco IOS XE SD-WAN Software 路径遍历漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A path traversal vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker could exploit...

Cisco IOS XE SD-WAN Software 注入漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary command execution vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker...

USN-4785-1: npm vulnerability

It was discovered that the npm command-line interface mishandled certain sensitive information. An attacker could use this vulnerability to collect authentication information that could be used to impersonate other users...

vManage CLI Compromise Data Compromise

The vulnerability of the command-line interface CLI of the vManage web interface for the Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Fortinet FortiManager FortiAnalyzer Unauthorized Access

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software and the Fortinet FortiAnalyzer security event monitoring and analysis tool is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker,...

Aruba AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the CLI of Aruba Networks...

CVE-2020-25715

A flaw was found in pki-core. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting XSS attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity. Mitigation Because the...

Azure IoT Platform CLI Privilege Escalation

The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-20074

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

Design/Logic Flaw

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

PT-2021-13752

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue in Racom's MIDGE Firmware allows users to escape the provided command line interface and execute arbitrary OS commands. Recommendations: For version 4.4.40.105, consider...

CVE-2021-20074: Improper Neutralization of Special Elements used in an OS Command

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

Cisco IOS XR Unauthorized Access

The vulnerability of the Cisco IOS XR operating system’s command-line interface CLI is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2021-23338

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...

CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

Cisco SD-WAN CLI Compromise

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...