Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient input validation of user-supplied CLI arguments. An attacker could exploit this vulnerability by authenticating to an affected device and using crafted commands at the prompt. A successful exploit could allow the attacker to execute arbitrary commands as root. The attacker must have valid credentials on the affected device.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
访问控制不恰当
Vulnerability Title
Cisco ThousandEyes Enterprise Agent 参数注入漏洞
Vulnerability Description
Cisco ThousandEyes Enterprise Agent是美国思科（Cisco）公司的一个应用程序。提供了扩展的可视性、自动化的见解和无缝的工作流程。 Cisco ThousandEyes Enterprise Agent存在安全漏洞，该漏洞源于对用户提供的CLI参数输入验证不足，可能允许经过身份验证的本地攻击者在受影响的设备上将权限提升为root。
CVSS Information
N/A
Vulnerability Type
N/A