cisco-sa-adeos-MLAyEcvk: Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities
Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-adeos-MLAyEcvk?
The severity of cisco-sa-adeos-MLAyEcvk is considered high due to the potential for local authenticated attackers to gain root privileges.
How do I fix cisco-sa-adeos-MLAyEcvk?
To fix cisco-sa-adeos-MLAyEcvk, apply the latest patches and updates provided by Cisco for the affected software products.
What products are affected by cisco-sa-adeos-MLAyEcvk?
The products affected by cisco-sa-adeos-MLAyEcvk include Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure.
Can cisco-sa-adeos-MLAyEcvk be exploited remotely?
No, the vulnerabilities outlined in cisco-sa-adeos-MLAyEcvk require local authentication to be exploited.
What type of attack does cisco-sa-adeos-MLAyEcvk involve?
cisco-sa-adeos-MLAyEcvk involves an authenticated, local attack allowing privilege escalation from the restricted shell to root access.