Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions with administrator privileges. The vulnerability is due to a processing error in the role-based access control (RBAC) of URLs. An attacker could exploit this vulnerability by sending API commands via HTTP to a particular URL without prior authentication. An exploit could allow the attacker to perform any actions in Cisco Prime Home with administrator privileges. This vulnerability affects Cisco Prime Home versions from 6.3.0.0 to the first fixed release 6.5.0.1. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Cisco Bug IDs: CSCvb49837.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
Cisco Prime Home 安全漏洞
Vulnerability Description
Cisco Prime Home是美国思科（Cisco）公司的一套基于标准的远程管理和配置解决方案。该方案提供家庭连接设备的统一视图的可视性、降低家庭网络运营成本和提高了用户体验等功能。web-based GUI是其中的一个基于Web的图形用户界面组件。 Cisco Prime Home 6.3.0.0版本至6.5.0.1版本中的web-based GUI存在安全漏洞。远程攻击者可利用该漏洞绕过身份验证，并以管理员权限执行操作。
CVSS Information
N/A
Vulnerability Type
N/A