Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Application Control Engine 4700 Device Manager GUI 命令注入漏洞
Vulnerability Description
Cisco Application Control Engine（ACE）4700是美国思科（Cisco）公司的一套应用于Cisco Catalyst 6500系列交换机和Cisco 7600系列路由器中的新一代负载均衡和应用交付解决方案。 Cisco ACE 4710 A5(3.1)之前A5版本的Device Manager GUI中存在安全漏洞。远程攻击者可借助POST请求中的参数利用该漏洞绕过既定的RBAC限制，以管理员权限执行任意CLI命令。
CVSS Information
N/A
Vulnerability Type
N/A