cisco-sa-aaascp-Tyj4fEJm: Cisco IOS and IOS XE Software Command Authorization Bypass Vulnerability
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to bypass command authorization and copy files to or from the file system of an affected device using the Secure Copy
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-aaascp-Tyj4fEJm?
The severity of cisco-sa-aaascp-Tyj4fEJm is high, as it allows attackers to bypass command authorization.
How do I fix cisco-sa-aaascp-Tyj4fEJm?
To fix cisco-sa-aaascp-Tyj4fEJm, you should apply the latest patches or updates provided by Cisco for affected IOS Software and IOS XE Software.
Who is affected by cisco-sa-aaascp-Tyj4fEJm?
cisco-sa-aaascp-Tyj4fEJm affects users of Cisco IOS Software and Cisco IOS XE Software that have the AAA feature enabled.
What could an attacker do with cisco-sa-aaascp-Tyj4fEJm?
An attacker could exploit cisco-sa-aaascp-Tyj4fEJm to bypass command authorization and transfer files to or from the affected device.
Is there a workaround for cisco-sa-aaascp-Tyj4fEJm?
Currently, the best mitigation for cisco-sa-aaascp-Tyj4fEJm is to ensure all software is kept up to date with the latest security releases from Cisco.