Beveiligingsadvies

CVE-2019-1755

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-03-28 00:15:22
Laatst bijgewerkt 2024-11-21 19:41:40
Toegewezen door cisco
CVSS-score 6.5
Status PUBLISHED

Beschrijving

A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary Cisco IOS commands as a privilege level 15 user. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker could exploit this vulnerability by submitting crafted HTTP requests to the targeted application. A successful exploit could allow the attacker to execute arbitrary commands on the affected device.