CVE-2019-12666mediumCWE-22

CVE-2019-12666: fallo de gravedad media en Cisco IOS XE Software 16.4.1

Cisco IOS XE Software Path Traversal Vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cisco IOS XE

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.7epss 1.1%
A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux operating system of Cisco IOS XE Software. The vulnerability is due to incomplete validation of certain commands. An attacker could exploit this vulnerability by first accessing the Guest Shell and then entering specific commands. A successful exploit could allow the attacker to execute arbitrary code on the base Linux operating system.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Cisco · Cisco IOS XE Software 16.4.1
CVEs relacionadas — Cisco IOS XE Software 16.4.1

En el mismo producto, de las más peligrosas a las menos.

CVE-2019-12667MEDIUMCisco IOS XE Software Stored Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2020-3220MEDIUMCisco IOS XE Software IPsec VPN Denial of Service VulnerabilityEPSS 0.5%