漏洞标题
Cisco Aironet系列接入点开发shell访问漏洞
漏洞描述信息
Cisco Aironet系列访问点开发shell访问漏洞
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Cisco Aironet Series Access Points Development Shell Access Vulnerability
漏洞描述信息
A vulnerability in the development shell (devshell) authentication for Cisco Aironet Series Access Points (APs) running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the underlying Linux OS. The attacker would need valid device credentials. The vulnerability exists because the software improperly validates user-supplied input at the CLI authentication prompt for development shell access. An attacker could exploit this vulnerability by authenticating to the device and entering crafted input at the CLI. A successful exploit could allow the attacker to access the AP development shell without proper authentication, which allows for root access to the underlying Linux OS. Software versions prior to 8.3.150.0, 8.5.135.0, and 8.8.100.0 are affected.
CVSS信息
N/A
漏洞类别
凭证管理
漏洞标题
多款Cisco产品访问控制错误漏洞
漏洞描述信息
Cisco Aironet 1540 Series APs等都是美国思科（Cisco）公司的产品。Cisco Aironet 1540 Series APs是一款1540系列访问接入点产品。Cisco Aironet 1560 Series APs是一款1560系列访问接入点产品。Cisco Aironet 1800 Series APs是一款1800系列访问接入点产品。 多款Cisco产品中的development shell(devshell)身份验证存在信任管理问题漏洞。该漏洞源于网络系统或产品中缺
CVSS信息
N/A
漏洞类别
授权问题