Skip to content
OpenAdvisories
Medium WID-SEC-2023-2567 1 CVE

Cisco Network Services Orchestrator: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten

Published Oct 4, 2023 · Updated Oct 4, 2023 · de-DE

Vendor: Cisco Product: Network Services Orchestrator Product: Network Services Orchestrator < 5.4.3.2 Product: Network Services Orchestrator < 5.5.2.3 Product: Network Services Orchestrator < 5.6.14.1 Product: Network Services Orchestrator < 5.7.13 Product: Network Services Orchestrator < 5.8.11 Product: Network Services Orchestrator < 6.0.8 Product: Network Services Orchestrator < 6.1.3.1

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Cisco Network Services Orchestrator ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

Product

Network Services Orchestrator (NSO) verbindet Tools zur Netzwerkautomatisierung und -orchestrierung mit der zugrunde liegenden physischen und virtuellen Infrastruktur.

Vulnerabilities 1

  • High 7.8
    CVE-2021-1572

    ConfD CLI Secure Shell Server Privilege Escalation Vulnerability

    A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the account under which ConfD is running, which is commonly root. To exploit this vulnerability, an attacker must have a valid account on an af…

    Cisco Cisco ConfD Network devices

Revision history

  1. #1

    Initiale Fassung

References