4.7
Moyenne
CVE-2026-20350 A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an…
Description
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by saving configuration details that contain malicious values. A successful exploit could allow the attacker to execute arbitrary operating system commands with root privileges. To exploit this vulnerability, the attacker must have valid administrative credentials.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco ThousandEyes Enterprise Agent | Versions non publiées |
Références
- cisco-sa-teva-os-command-W4GAO6jp sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco ThousandEyes Enterprise Agent
Les 4 CVE de Cisco ThousandEyes Enterprise Agent →
CVE-2026-20199
A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated,…
4.7
Moyenne
CVE-2026-20206
A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an…
6.3
Moyenne
CVE-2026-20161
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with…
5.5
Moyenne