Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Prime Network Control Systems Device Work Center组件权限许可和访问控制漏洞
Vulnerability Description
Cisco Prime Network Control Systems（NCS）是美国思科（Cisco）公司的一套基于无线控制系统（WCS）构建的网络管理平台（网络控制系统）。Device Work Center（DWC）是其中的一个监控、故障诊断组件。 Cisco Prime NCS的DWC组件中存在安全漏洞，该漏洞源于程序没有正确实现AAA用户角色。远程攻击者可借助登录会话利用该漏洞绕过既定的访问限制，并执行命令。以下版本受到影响：Cisco Prime NCS 2.1(0.0.85)版本，2.2(0
CVSS Information
N/A
Vulnerability Type
N/A