ID de Prueba:	1.3.6.1.4.1.25623.1.0.106731
Categoría:	CISCO
Título:	Cisco Aironet 1800, 2800, and 3800 Series Access Point Platforms Shell Bypass Vulnerability
Resumen:	A vulnerability in login authentication management in Cisco Aironet 1800,;2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted;root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting;and should not be available to individual users, even those with root privileges. The attacker must have the root;password to exploit this vulnerability.
Descripción:	Summary: A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. Vulnerability Insight: The vulnerability occurs because of incorrect management of user credentials when the user authenticates to the device. An attacker could exploit this vulnerability by authenticating to the affected device with the root account. Vulnerability Impact: An exploit could allow the authenticated, privileged attacker to bypass the controls required for root Linux shell access. If the authenticated user obtains root Linux shell access, further compromise may be possible. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9196 BugTraq ID: 97468 http://www.securityfocus.com/bid/97468 http://www.securitytracker.com/id/1038187
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.