EUVD-2013-5333

Malware in sbrugna...

Cisco Virtualization Experience Client Input Validation Elevation of Privilege Vulnerability

Cisco Virtualization Experience Client is a thin client for integrated virtualization infrastructure from Cisco USA. An input validation vulnerability in the subsystem that manages the WEB interface, included in firmware version 11.2 27.4 of the Cisco Virtualization Experience Client 6000 series,...

CVE-2013-5493: Improper Input Validation

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407...

Cisco Virtualization Experience Client Series 6000 Local Arbitrary Command Execution Vulnerability

A vulnerability in the diagnostic module of the Cisco Virtualization Experience Client 6000 Series could allow an authenticated, non-privileged, local attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to lack of input validation in the diagnostic...

CVE-2013-3408

Summary: CVE-2013-3408 affects Cisco Virtualization Experience Client 6000 Series. The issue stems from improper implementation of underlying operating-system permissions, allowing an authenticated, local attacker to escalate privileges and take full control of the affected system. The root cause...

CVE-2013-3408: Undefined Security Weakness

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764...