CVE-2014-7990

Cisco IOS XE vulnerability CVE-2014-7990 affects the 3.5E and earlier releases on WS-C3850, WS-C3860, and AIR-CT5760 platforms. The issue stems from improper parsing of the "+request system shell" challenge response, enabling an authenticated local attacker with administrative privilege to obtain...