EUVD-2017-3824

Malware in sbrugna...

CVE-2018-0454

Cisco Cloud Services Platform 2100’s web-based management interface is affected by a command-injection vulnerability caused by insufficient input validation. An authenticated, remote attacker could exploit this to run customized commands. CVSSv3 base score is 8.8 (HIGH) with network access, low a...

CVE-2017-12251

The CVE-2017-12251 issue affects Cisco Cloud Services Platform (CSP) 2100 running software releases 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, or 2.2.2. The vulnerability arises from weaknesses in the generation of authentication mechanisms in the CSP web console URL, enabling an authenticated, remote at...

CVE-2017-12251: Improper Authentication

A vulnerability in the web console of the Cisco Cloud Services Platform CSP 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines VMs operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation o...

PT-2017-12427

Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform CSP 2100 versions 2.1.0 through 2.2.2 Description A weakness in the generation of certain authentication mechanisms in the URL of the web console could allow an authenticated, remote attacker to interact malicious...

CVE-2016-6374

Cisco Cloud Services Platform CSP 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093...

Command injection

Cisco Cloud Services Platform CSP 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093...

CVE-2016-6373

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

CVE-2016-6373

Cisco Cloud Services Platform (CSP) 2100 web GUI vulnerability (CVE-2016-6373) affects CSP2100 2100 series running 2.0 and 2.x prior to 2.1.0. An authenticated remote attacker can inject commands via crafted platform requests to execute arbitrary OS commands with root privileges. The issue stems ...

CVE-2016-6374

Cisco Cloud Services Platform CSP 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093...

CVE-2016-6374

CVE-2016-6374 affects Cisco Cloud Services Platform (CSP) 2100, specifically 2.x prior to 2.1.0, where an unauthenticated, remote attacker can exploit a web GUI input sanitization flaw to execute arbitrary code via a crafted dnslookup HTTP request. Root cause: improper sanitization of user-suppli...

CVE-2016-6373: Improper Neutralization of Special Elements used in an OS Command

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

PT-2016-6855

Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform CSP 2100 version 2.0 Description The issue allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request. Recommendations For Cisco Cloud Services Platform CSP 2100 version...

PT-2016-6854

Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform CSP 2100 version 2.0 Description The issue allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands. Recommendations For Cisco Cloud Services Platform CSP...

CVE-2016-6374: Improper Input Validation

Cisco Cloud Services Platform CSP 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093...