Design/Logic Flaw

A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, and gain root access...

CVE-2018-6441

A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass the restricted configuration shell...

CVE-2018-6435

A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, and gain root access...

CVE-2018-6438: Undefined Security Weakness

A Vulnerability in the supportsave command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...

CVE-2018-6436: Undefined Security Weakness

A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...

CVE-2018-6435: Undefined Security Weakness

A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, and gain root access...

PT-2018-17549

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d Description A local attacker could exploit a vulnerability in the...

PT-2018-17551

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d Description A local attacker could exploit a vulnerability in the...

CVE-2018-6437: Undefined Security Weakness

A Vulnerability in the help command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...

PT-2018-17550

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d Description A local attacker could exploit a vulnerability in the help...

PT-2018-17548

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d Description A local attacker could exploit an issue in the secryptocfg...

VyOS restricted-shell Escape and Privilege Escalation

This module exploits command injection vulnerabilities and an insecure default sudo configuration on VyOS versions 1.0.0 use exploit/linux/ssh/vyos/restrictedshellprivesc msf undefinedrestrictedshellprivesc show actions ...actions... msf undefinedrestrictedshellprivesc set ACTION msf...

BSA-2018-731

Security Advisory ID : BSA-2018-731 Component : Fabric OS CLI Revision : 1.0: Initial Multiple Vulnerabilities in Brocade Fabric OS command line interface CLIcould allow a local attacker toescape the restricted shell and, gain root access. Commands Affected help command -CVE-2018-6437 - CVSS 3: 7...

BSA-2018-730

Security Advisory ID : BSA-2018-730 Component : Fabric OS CLI Revision : 1.0: Initial Multiple Vulnerabilities in Brocade Fabric OS command line interface CLIcould allow a local attacker toescape the restricted shell and, gain root access. Commands Affected firmwaredownload command -CVE-2018-6436...

Cisco Cloud Services Platform 2100 Remote Code Injection Vulnerability

Cisco Cloud Services Platform CSP 2100 is the United States Cisco Cisco company's set of hardware and software platform for data center network function virtualization. An input validation vulnerability exists in the Web Upload function in the Cisco CSP 2100, which stems from the program failing ...

CVE-2018-0394

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted shell access on an affected system. The vulnerability is due to insufficient input validation of parameters passed to a specific function within the...

Input validation

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted shell access on an affected system. The vulnerability is due to insufficient input validation of parameters passed to a specific function within the...

CVE-2018-0394

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted shell access on an affected system. The vulnerability is due to insufficient input validation of parameters passed to a specific function within the...

PT-2018-8809

Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform 2100 affected versions not specified Description A vulnerability in the web upload function could allow an authenticated, remote attacker to obtain restricted shell access on an affected system. The issue is due t...

CVE-2018-0394: Improper Input Validation

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted shell access on an affected system. The vulnerability is due to insufficient input validation of parameters passed to a specific function within the...