ID de Prueba:	1.3.6.1.4.1.25623.1.0.106140
Categoría:	CISCO
Título:	Cisco IOS XR Software Command Injection Vulnerability (cisco-sa-20160714-ios-xr)
Resumen:	A vulnerability in the command-line utility of Cisco IOS XR; Software could allow an authenticated, local attacker to execute arbitrary commands on the host; operating system with elevated privileges.
Descripción:	Summary: A vulnerability in the command-line utility of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with elevated privileges. Vulnerability Insight: The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting crafted input to a command in a specific container. Vulnerability Impact: A successful exploit could allow the attacker to execute arbitrary commands on the affected system with root privileges. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1456 BugTraq ID: 91785 http://www.securityfocus.com/bid/91785 Cisco Security Advisory: 20160714 Cisco IOS XR Software Command Injection Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-ios-xr http://www.securitytracker.com/id/1036311
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.