Cisco Virtualization Experience Client 6000 Local Arbitrary Command Execution Vulnerability
BID:62361
Info
Cisco Virtualization Experience Client 6000 Local Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 62361 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-5493 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 12 2013 12:00AM |
| Updated: | Sep 12 2013 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Virtualization Experience Client 6000 Local Arbitrary Command Execution Vulnerability
Cisco Virtualization Experience Client 6000 series devices are prone to a local arbitrary command-execution vulnerability.
Local authenticated attackers can exploit this issue to execute arbitrary commands on the underlying operating system.
This issue is being tracked by Cisco bug ID CSCug68407.
Cisco Virtualization Experience Client 6000 series devices are prone to a local arbitrary command-execution vulnerability.
Local authenticated attackers can exploit this issue to execute arbitrary commands on the underlying operating system.
This issue is being tracked by Cisco bug ID CSCug68407.
Exploit / POC
Cisco Virtualization Experience Client 6000 Local Arbitrary Command Execution Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Cisco Virtualization Experience Client 6000 Local Arbitrary Command Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Virtualization Experience Client 6000 Local Arbitrary Command Execution Vulnerability
References:
References: