EUVD-2020-24667

Malware in sbrugna...

CVE-2020-3396

A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive SSD for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3.0 SSD and modify sensitive areas of the file system, including the namespace container protections. The vulnerability...

CVE-2020-3396

The CVE-2020-3396 issue affects Cisco IOS XE Software IOx Guest Shell running on pluggable USB 3.0 SSDs. The root cause is that USB SSD control data is not stored on the device’s internal boot flash, enabling a physical attacker to remove the USB drive, alter or delete files, then reinsert it to ...

Cisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability (cisco-sa-20190925-iox-gs)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the filesystem which allows an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficient fil...

CVE-2019-12670

A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficient file permissions. An attacker could exploit this...

CVE-2019-12670

Cisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability (CVE-2019-12670) affects the filesystem permissions of the IOx Guest Shell namespace on Cisco IOS XE. The issue arises from insufficient file permissions, allowing an authenticated, local attacker within the IOx Guest Shell ...

Linux kernel local elevation of privilege vulnerability (CNVD-2015-07700)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the 'prependpath' function in the fs/dcache.c file in Linux kernel 4.2.3 and earlier. Due to the program failing to properly handle rename...