CVE-2019-12666mediumCWE-22

CVE-2019-12666: falha de média gravidade em Cisco IOS XE Software 16.4.1

Cisco IOS XE Software Path Traversal Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco IOS XE

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.7epss 1.1%
A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux operating system of Cisco IOS XE Software. The vulnerability is due to incomplete validation of certain commands. An attacker could exploit this vulnerability by first accessing the Guest Shell and then entering specific commands. A successful exploit could allow the attacker to execute arbitrary code on the base Linux operating system.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco IOS XE Software 16.4.1
CVEs relacionadas — Cisco IOS XE Software 16.4.1

No mesmo produto, das mais perigosas para as menos.

CVE-2019-12667MEDIUMCisco IOS XE Software Stored Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2020-3220MEDIUMCisco IOS XE Software IPsec VPN Denial of Service VulnerabilityEPSS 0.5%