6.7
Moyenne
CVE-2019-1623 A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to…
Description
A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to insufficient input validation during the execution of a vulnerable CLI command. An attacker with administrator-level credentials could exploit this vulnerability by injecting crafted arguments during command execution. A successful exploit could allow the attacker to perform arbitrary code execution as root on an affected product.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Meeting Server 2.2 | premières → < 2.2.14 | 2.2.14 |
Références
- 20190619 Cisco Meeting Server CLI Command Injection Vulnerability tools.cisco.com
- 108840 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Meeting Server
Les 9 CVE de Cisco Meeting Server →
CVE-2023-20255
A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote…
5.3
Moyenne
CVE-2021-40122
A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote…
5.9
Moyenne
CVE-2021-1524
A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of…
4.3
Moyenne
CVE-2020-3160
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software…
5.3
Moyenne