cisco-sa-adeos-MLAyEcvk: Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities
First published: Wed Apr 05 2023(Updated: )
Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Evolved Programmable Network Manager | ||
| Cisco Identity Services Engine (ISE) | ||
| Cisco Prime Infrastructure |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-adeos-MLAyEcvk?
The severity of cisco-sa-adeos-MLAyEcvk is considered high due to the potential for local authenticated attackers to gain root privileges.
How do I fix cisco-sa-adeos-MLAyEcvk?
To fix cisco-sa-adeos-MLAyEcvk, apply the latest patches and updates provided by Cisco for the affected software products.
What products are affected by cisco-sa-adeos-MLAyEcvk?
The products affected by cisco-sa-adeos-MLAyEcvk include Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure.
Can cisco-sa-adeos-MLAyEcvk be exploited remotely?
No, the vulnerabilities outlined in cisco-sa-adeos-MLAyEcvk require local authentication to be exploited.
What type of attack does cisco-sa-adeos-MLAyEcvk involve?
cisco-sa-adeos-MLAyEcvk involves an authenticated, local attack allowing privilege escalation from the restricted shell to root access.
- collector/cisco-recent
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco evolved programmable network manager
- canonical/cisco identity services engine (ise)
- canonical/cisco prime infrastructure