BDU:2024-02494

Vulnerability from fstec - Published: 27.03.2024
VLAI Severity ?
Title
Уязвимость интерфейса командной строки (CLI) операционных систем Cisco IOS XE контроллеров беспроводного доступа Cisco Wireless LAN Controllers (WLCs), позволяющая нарушителю повысить свои привилегии
Description
Уязвимость интерфейса командной строки (CLI) операционных систем Cisco IOS XE контроллеров беспроводного доступа Cisco Wireless LAN Controllers (WLCs) связана с недостатками разграничения доступа в результате использования команд show и show tech wireless в конфигурации WLAN. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии
Vendor
Cisco Systems Inc.
Software Name
Cisco IOS XE
Software Version
16.10.1 (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.10 (Cisco IOS XE), 16.11 (Cisco IOS XE), 17.2 (Cisco IOS XE), 17.3 (Cisco IOS XE), 17.4 (Cisco IOS XE), 17.5 (Cisco IOS XE), 17.6 (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1b (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.12.1t (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.12 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 17.1 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 16.12.4a (Cisco IOS XE), 17.1.1a (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1a (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.10 (Cisco IOS XE), 17.11 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.12 (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.6a (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7 (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.4c (Cisco IOS XE), 17.3.5a (Cisco IOS XE), 17.3.5b (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE)
Possible Mitigations
Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-privesc-RjSMrmPK
Reference
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-privesc-RjSMrmPK
CWE
CWE-269, CWE-274

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.10.1 (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.10 (Cisco IOS XE), 16.11 (Cisco IOS XE), 17.2 (Cisco IOS XE), 17.3 (Cisco IOS XE), 17.4 (Cisco IOS XE), 17.5 (Cisco IOS XE), 17.6 (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1b (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.12.1t (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.12 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 17.1 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 16.12.4a (Cisco IOS XE), 17.1.1a (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1a (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.10 (Cisco IOS XE), 17.11 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.12 (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.6a (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7 (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.4c (Cisco IOS XE), 17.3.5a (Cisco IOS XE), 17.3.5b (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-privesc-RjSMrmPK",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "27.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "02.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "02.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02494",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-20324",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems Inc. Cisco IOS XE 16.10.1 , Cisco Systems Inc. Cisco IOS XE 16.12.1 , Cisco Systems Inc. Cisco IOS XE 16.10 , Cisco Systems Inc. Cisco IOS XE 16.11 , Cisco Systems Inc. Cisco IOS XE 17.2 , Cisco Systems Inc. Cisco IOS XE 17.3 , Cisco Systems Inc. Cisco IOS XE 17.4 , Cisco Systems Inc. Cisco IOS XE 17.5 , Cisco Systems Inc. Cisco IOS XE 17.6 , Cisco Systems Inc. Cisco IOS XE 16.10.1s , Cisco Systems Inc. Cisco IOS XE 16.10.1e , Cisco Systems Inc. Cisco IOS XE 16.11.1 , Cisco Systems Inc. Cisco IOS XE 16.11.1a , Cisco Systems Inc. Cisco IOS XE 16.11.1b , Cisco Systems Inc. Cisco IOS XE 16.11.1c , Cisco Systems Inc. Cisco IOS XE 16.12.1s , Cisco Systems Inc. Cisco IOS XE 16.12.1t , Cisco Systems Inc. Cisco IOS XE 16.11.2 , Cisco Systems Inc. Cisco IOS XE 16.12 , Cisco Systems Inc. Cisco IOS XE 17.2.1 , Cisco Systems Inc. Cisco IOS XE 17.1.1 , Cisco Systems Inc. Cisco IOS XE 17.1 , Cisco Systems Inc. Cisco IOS XE 16.12.2s , Cisco Systems Inc. Cisco IOS XE 16.12.2t , Cisco Systems Inc. Cisco IOS XE 16.12.4 , Cisco Systems Inc. Cisco IOS XE 16.12.3s , Cisco Systems Inc. Cisco IOS XE 16.12.4a , Cisco Systems Inc. Cisco IOS XE 17.1.1a , Cisco Systems Inc. Cisco IOS XE 17.1.2 , Cisco Systems Inc. Cisco IOS XE 17.1.1t , Cisco Systems Inc. Cisco IOS XE 17.1.3 , Cisco Systems Inc. Cisco IOS XE 17.2.1a , Cisco Systems Inc. Cisco IOS XE 17.3.1 , Cisco Systems Inc. Cisco IOS XE 17.6.1 , Cisco Systems Inc. Cisco IOS XE 17.9.1 , Cisco Systems Inc. Cisco IOS XE 17.10 , Cisco Systems Inc. Cisco IOS XE 17.11 , Cisco Systems Inc. Cisco IOS XE 17.11.1 , Cisco Systems Inc. Cisco IOS XE 17.12 , Cisco Systems Inc. Cisco IOS XE 17.12.1 , Cisco Systems Inc. Cisco IOS XE 17.10.1 , Cisco Systems Inc. Cisco IOS XE 17.10.1a , Cisco Systems Inc. Cisco IOS XE 16.12.3 , Cisco Systems Inc. Cisco IOS XE 16.12.8 , Cisco Systems Inc. Cisco IOS XE 16.12.5 , Cisco Systems Inc. Cisco IOS XE 16.12.6 , Cisco Systems Inc. Cisco IOS XE 16.12.6a , Cisco Systems Inc. Cisco IOS XE 16.12.7 , Cisco Systems Inc. Cisco IOS XE 17.8 , Cisco Systems Inc. Cisco IOS XE 17.8.1 , Cisco Systems Inc. Cisco IOS XE 17.9 , Cisco Systems Inc. Cisco IOS XE 17.9.2 , Cisco Systems Inc. Cisco IOS XE 17.9.3 , Cisco Systems Inc. Cisco IOS XE 17.9.4 , Cisco Systems Inc. Cisco IOS XE 17.9.4a , Cisco Systems Inc. Cisco IOS XE 17.7 , Cisco Systems Inc. Cisco IOS XE 17.7.1 , Cisco Systems Inc. Cisco IOS XE 17.6.5a , Cisco Systems Inc. Cisco IOS XE 17.6.6a , Cisco Systems Inc. Cisco IOS XE 17.6.6 , Cisco Systems Inc. Cisco IOS XE 17.6.2 , Cisco Systems Inc. Cisco IOS XE 17.6.3 , Cisco Systems Inc. Cisco IOS XE 17.6.4 , Cisco Systems Inc. Cisco IOS XE 17.6.5 , Cisco Systems Inc. Cisco IOS XE 17.3.2 , Cisco Systems Inc. Cisco IOS XE 17.3.3 , Cisco Systems Inc. Cisco IOS XE 17.3.2a , Cisco Systems Inc. Cisco IOS XE 17.3.4 , Cisco Systems Inc. Cisco IOS XE 17.3.5 , Cisco Systems Inc. Cisco IOS XE 17.3.6 , Cisco Systems Inc. Cisco IOS XE 17.3.4c , Cisco Systems Inc. Cisco IOS XE 17.3.5a , Cisco Systems Inc. Cisco IOS XE 17.3.5b , Cisco Systems Inc. Cisco IOS XE 17.3.7 , Cisco Systems Inc. Cisco IOS XE 17.3.8 , Cisco Systems Inc. Cisco IOS XE 17.3.8a , Cisco Systems Inc. Cisco IOS XE 17.4.1 , Cisco Systems Inc. Cisco IOS XE 17.5.1 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Cisco Wireless LAN Controllers (WLCs), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (CWE-269), \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (CWE-274)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Cisco Wireless LAN Controllers (WLCs) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 show \u0438 show tech wireless \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 WLAN. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-privesc-RjSMrmPK",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-269, CWE-274",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…