Local Command Execution Vulnerability in Multiple Cisco Products

Cisco Unified Computing System Manager is a set of embedded device management software.Cisco Firepower 9300 Security Appliance are Cisco security appliances.Cisco Firepower 9000 is an operating system running on the 9000 series firewall appliances from Cisco. Cisco Firepower 9000 is a Cisco...

IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven

A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...

Sql injection

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

Code injection

Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...

CVE-2015-6027

Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...

CVE-2015-6028

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

CVE-2015-6028

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

CVE-2015-6027

Castle Rock Computing SNMPc is vulnerable to Cross-Site Scripting via SNMP in versions prior to 2015-12-17. Affected component is SNMPc; root cause is a XSS vulnerability exploitable through SNMP. Public impact details are limited to what is stated in the sources (XSS; potential for modification ...

CVE-2015-6028

Castle Rock Computing SNMPc is affected by CVE-2015-6028 due to a SQL injection in the sc parameter prior to 2015-12-17. The CNVD record CNVD-2017-05437 confirms the vulnerability in Castle Rock SNMPc Network Manager, noting the ability for a remote attacker to extract data from the database via ...

PT-2017-6920

Name of the Vulnerable Software and Affected Versions Castle Rock Computing SNMPc versions prior to 2015-12-17 Description The issue allows for SQL injection via the sc parameter. Recommendations For versions prior to 2015-12-17, update to a version released after 2015-12-17 to resolve the issue...

PT-2017-6919

Name of the Vulnerable Software and Affected Versions Castle Rock Computing SNMPc versions prior to 2015-12-17 Description The issue allows for cross-site scripting XSS attacks via SNMP. Recommendations For versions prior to 2015-12-17, update to a version released after 2015-12-17 to resolve the...

CVE-2015-6027: Improper Neutralization of Input During Web Page Generation

Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...

CVE-2015-6028: Improper Neutralization of Special Elements used in an SQL Command

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

CVE-2017-6601

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...

CVE-2017-6597

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...

CVE-2017-6598

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...

CVE-2017-3817

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.50.1...

Command injection

A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...

CVE-2017-6598

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...

CVE-2017-6601

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...