Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Application Policy Infrastructure Controller Enterprise Module 远程代码执行漏洞
Vulnerability Description
Cisco Application Policy Infrastructure Controller Enterprise Module（APIC-EM）是美国思科（Cisco）公司的一套提供了基于策略的用于自动配置端至端的基础设施控制器的应用程序。 Cisco APIC-EM 1.0版本中的Grapevine更新过程存在远程代码执行漏洞。远程攻击者可通过发送特制的‘upgrade’参数利用该漏洞以root权限执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A