PT-2018-1773

CVE-2018-0427

·

تاريخ النشر

2018-08-15

·

تاريخ التحديث

2020-08-31

الوصف من

CVSS 2.0
9.0
عالية
المقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco Digital Network Architecture (DNA) Center (affected versions not specified)
Description A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack due to incorrect input validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious packet, potentially allowing the execution of arbitrary commands with root privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾