One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 405521 |
| Date de publication | 2017-09-07 21:29:01 (vue: 2017-09-07 21:29:01) |
| Titre | CVE-2017-6796 |
| Texte | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. Cisco Bug IDs: CSCve48949. |
| Envoyé | Oui |
| Condensat | 2017 6796 920 affected aggregation allow arbitrary asr attacker authenticated bug cisco cli code command commands could cscve48949 cve device due execute exploit ids: improper inject input ios local modem modifying operating platform routers running series services software successful system underlying usb validation vulnerability |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.