Cisco IOS XE Software Web UI Command Injection Vulnerability

A vulnerability in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying a crafted input parameter on a form in the Web UI and then submitting that form. A successful exploit could allow the attacker to run arbitrary commands on the device with root privileges, which may lead to complete system compromise.

N/A

输入验证不恰当

Cisco IOS XE Software 输入验证错误漏洞

Cisco IOS XE是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS XE Software中的Web UI存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。

N/A

N/A