Cisco Network Analysis Module Software CVE-2017-12285 Directory Traversal Vulnerability
BID:101527
Info
Cisco Network Analysis Module Software CVE-2017-12285 Directory Traversal Vulnerability
| Bugtraq ID: | 101527 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-12285 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2017 12:00AM |
| Updated: | Oct 18 2017 12:00AM |
| Credit: | rgod working with Trend Micro's Zero Day Initiative. |
| Vulnerable: |
Cisco Prime Network Analysis Module Software 6.2(1b) |
| Not Vulnerable: | |
Discussion
Cisco Network Analysis Module Software CVE-2017-12285 Directory Traversal Vulnerability
Cisco Network Analysis Module Software is prone to a directory-traversal vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCvf41365.
Cisco Network Analysis Module Software is prone to a directory-traversal vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCvf41365.
Exploit / POC
Cisco Network Analysis Module Software CVE-2017-12285 Directory Traversal Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco Network Analysis Module Software CVE-2017-12285 Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Network Analysis Module Software CVE-2017-12285 Directory Traversal Vulnerability
References:
References: