Test Kennung:	1.3.6.1.4.1.25623.1.0.106140
Kategorie:	CISCO
Titel:	Cisco IOS XR Software Command Injection Vulnerability (cisco-sa-20160714-ios-xr)
Zusammenfassung:	A vulnerability in the command-line utility of Cisco IOS XR; Software could allow an authenticated, local attacker to execute arbitrary commands on the host; operating system with elevated privileges.
Beschreibung:	Summary: A vulnerability in the command-line utility of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with elevated privileges. Vulnerability Insight: The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting crafted input to a command in a specific container. Vulnerability Impact: A successful exploit could allow the attacker to execute arbitrary commands on the affected system with root privileges. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1456 BugTraq ID: 91785 http://www.securityfocus.com/bid/91785 Cisco Security Advisory: 20160714 Cisco IOS XR Software Command Injection Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-ios-xr http://www.securitytracker.com/id/1036311
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.