Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Connected Mobile Experiences Privilege Escalation Vulnerability
Vulnerability Description
A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
授权机制不正确
Vulnerability Title
Cisco Connected Mobile Experiences 访问控制错误漏洞
Vulnerability Description
Cisco Connected Mobile Experiences是美国思科（Cisco）公司的一个互联移动体验。 Cisco Connected Mobile Experiences 存在访问控制错误漏洞，该漏洞允许远程、经过身份验证、没有管理权限的攻击者更改受影响系统上任何用户的密码。该漏洞是由于修改密码的授权检查处理不当造成的。
CVSS Information
N/A
Vulnerability Type
N/A