Multiple Cisco Products CLI Command Injection Vulnerability
A vulnerability in the implementation of the CLI for multiple Cisco products could allow an authenticated, local attacker to perform a command injection attack. This vulnerability is due to insufficient validation of a process argument on an affected product. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the management framework process, which are commonly root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-20655US | — | — | ||
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.
The vulnera… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Bug Search Toolexternal
- CSCvm76596external
- CSCvq22323external
- CSCvq58164external
- CSCvq58168external
- CSCvq58183external
- CSCvq58204external
- CSCvq58224external
Behebungen (40)
- BehobenCisco Carrier Packet Transport
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Catalyst SD-WAN
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Catalyst SD-WAN Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Enterprise NFV Infrastructure Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 1000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco Integrated Services Virtual Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 1000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Cloud Services Router 1000V Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Integrated Services Virtual Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 1000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco Cloud Services Router 1000V Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco Integrated Services Virtual Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.11.1f when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 1000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco Integrated Services Virtual Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 1000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco Integrated Services Virtual Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 1000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco Integrated Services Virtual Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 1000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco Integrated Services Virtual Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XR Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Network Services Orchestrator
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco SD-WAN vEdge Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Ultra Gateway Platform
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Virtual Topology System (VTS)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan