漏洞标题
Cisco IOS XE软件Web UI输入验证不当漏洞
漏洞描述信息
Cisco IOS XE软件Web UI输入验证不当漏洞
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
漏洞类别
N/A
漏洞标题
Cisco IOS XE Software Web UI Improper Input Validation Vulnerability
漏洞描述信息
A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The vulnerability is due to insufficient input validation during authentication. An attacker could exploit this vulnerability by entering unexpected characters during a valid authentication. A successful exploit could allow the attacker to crash the web server on the device, which must be manually recovered by disabling and re-enabling the web server.
CVSS信息
N/A
漏洞类别
输入验证不恰当
漏洞标题
Cisco IOS和IOS XE 输入验证错误漏洞
漏洞描述信息
Cisco IOS和IOS XE都是美国思科(Cisco)公司的一套为其网络设备开发的操作系统。 Cisco IOS XE Software 存在输入验证错误漏洞,该漏洞源于系统没有对用户输入的特殊字符进行验证,攻击者可导致该Web 服务器崩溃。
CVSS信息
N/A
漏洞类别
输入验证错误