Cisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability

A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficient file permissions. An attacker could exploit this vulnerability by modifying files that they should not have access to. A successful exploit could allow the attacker to remove container protections and perform file actions outside the namespace of the container.

N/A

访问控制不恰当

Cisco IOS XE 访问控制错误漏洞

Cisco IOS XE是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS XE中的文件系统存在访问控制错误漏洞，该漏洞源于不充分的文件权限。本地攻击者可利用该漏洞移除容器保护并在该容器名称空间之外执行文件操作。

N/A

N/A