Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.106283
Categoría:CISCO
Título:Cisco Application Policy Infrastructure Controller Binary Privilege Escalation Vulnerability
Resumen:A vulnerability in the installation procedure for Cisco Application Policy;Infrastructure Controller (APIC) devices could allow an authenticated, local attacker to gain root-level;privileges.
Descripción:Summary:
A vulnerability in the installation procedure for Cisco Application Policy
Infrastructure Controller (APIC) devices could allow an authenticated, local attacker to gain root-level
privileges.

Vulnerability Insight:
The vulnerability is due to incorrect installation and permissions settings
for binary files when installing the system software on a device. An attacker could exploit this vulnerability
by logging in to the device and escalating their privileges.

Vulnerability Impact:
A successful exploit could allow the attacker to gain root-level privileges
and take full control of the device.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
6.8

CVSS Vector:
AV:L/AC:L/Au:S/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2016-6413
Cisco Security Advisory: 20160921 Cisco Application Policy Infrastructure Controller Binary Privilege Escalation Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-apic
http://www.securitytracker.com/id/1036872
CopyrightCopyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.