Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability
Vulnerability Description
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperly sanitizing command arguments to prevent modifications to the underlying Linux filesystem on a device. An attacker who has privileged EXEC mode (privilege level 15) access to an affected device could exploit this vulnerability on the device by executing CLI commands that contain crafted arguments. A successful exploit could allow the attacker to gain access to the underlying Linux shell of the affected device and execute arbitrary commands with root privileges on the device.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Cisco IOS XE Software CLI解析器输入验证漏洞
Vulnerability Description
Cisco IOS XE Software是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。CLI parser是其中的一个命令行命令解析器。 Cisco IOS XE Software中的CLI解析器存在输入验证漏洞，该漏洞源于受影响的软件没有正确的过滤命令参数来防止对底层Linux文件系统进行修改。本地攻击者可通过执行带有特制参数的CLI命令利用该漏洞获取底层Linux shell的访问权限并以root权限执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A