Vulnerability Bulletins |
Vulnerabilidad de escalada de privilegios en múltiples productos Cisco |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Aumento de privilegios |
| Dificulty | Avanzado |
| Required attacker level | Acceso fisico |
System information |
|
| Property | Value |
| Affected manufacturer | Networking |
| Affected software |
Cisco Context Directory Agent 1.x Cisco Identity Services Engine (ISE) 1.x Cisco Network Services Manager 5.x Cisco Prime Collaboration 9.x Cisco Secure Access Control System (ACS) 5.x Cisco WebEx Social (formerly Cisco Quad) Cisco Application Networking Manager (ANM) 2.x Cisco Prime LAN Management Solution (LMS) 4.x Cisco Prime Network Control System 1.x Cisco Unified Provisioning Manager 8.x |
Description |
|
| Se ha descubierto una vulnerabilidad en múltiples productos Cisco, causada por un error en la validación de datos de entrada en la interfaz de línea de comandos (CLI), que podría ser aprovechada por usuarios locales maliciosos para escalar privilegios. | |
Solution |
|
| De momento no se ha publicado ninguna solución. | |
Standar resources |
|
| Property | Value |
| CVE | CVE-2013-1125 |
| BID | |
Other resources |
|
|
Multiple Cisco Product Root Shell Access Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1125 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2013-02-27 |