EUVD-2013-5333

Malware in sbrugna...

Cisco Virtualization Experience Client Input Validation Elevation of Privilege Vulnerability

Cisco Virtualization Experience Client is a thin client for integrated virtualization infrastructure from Cisco USA. An input validation vulnerability in the subsystem that manages the WEB interface, included in firmware version 11.2 27.4 of the Cisco Virtualization Experience Client 6000 series,...

Cisco Virtualization Experience Client Series 6000 Local Arbitrary Command Execution Vulnerability

A vulnerability in the diagnostic module of the Cisco Virtualization Experience Client 6000 Series could allow an authenticated, non-privileged, local attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to lack of input validation in the diagnostic...

CVE-2013-3408

Summary: CVE-2013-3408 affects Cisco Virtualization Experience Client 6000 Series. The issue stems from improper implementation of underlying operating-system permissions, allowing an authenticated, local attacker to escalate privileges and take full control of the affected system. The root cause...