Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
Vulnerability Description
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities, see the Details section of this security advisory.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Cisco Adaptive Security Appliances Software 输入验证错误漏洞
Vulnerability Description
Cisco Adaptive Security Appliances Software（ASA Software）是美国思科（Cisco）公司的一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。 Cisco ASA中的smart tunnel功能存在输入验证错误漏洞，该漏洞源于ASA smart tunnel在客户端设备上创建的本地系统文件分配了较宽松的权限。本地攻击者可通过运行恶意的脚本利用该漏洞在用户未知情的情况下将权限提升至root。
CVSS Information
N/A
Vulnerability Type
N/A