cisco-sa-iosxe-arg-inject-EyDDbh4e: Cisco IOS XE Software CLI Argument Injection Vulnerability
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device.This vulnerability is due to insufficient validation
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-iosxe-arg-inject-EyDDbh4e?
The severity of cisco-sa-iosxe-arg-inject-EyDDbh4e is considered high due to the potential for arbitrary command execution as root.
How do I fix cisco-sa-iosxe-arg-inject-EyDDbh4e?
To fix cisco-sa-iosxe-arg-inject-EyDDbh4e, upgrade to the fixed versions of Cisco IOS XE Software as specified in the advisory.
Who is affected by cisco-sa-iosxe-arg-inject-EyDDbh4e?
Devices running affected versions of Cisco IOS XE Software with administrative access are vulnerable to cisco-sa-iosxe-arg-inject-EyDDbh4e.
What causes cisco-sa-iosxe-arg-inject-EyDDbh4e?
cisco-sa-iosxe-arg-inject-EyDDbh4e is caused by insufficient validation of user inputs in the command-line interface of Cisco IOS XE Software.
Is cisco-sa-iosxe-arg-inject-EyDDbh4e exploitable remotely?
No, cisco-sa-iosxe-arg-inject-EyDDbh4e can only be exploited by an authenticated local attacker with administrative privileges.