QID 316993

A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA)
could allow an authenticated, remote attacker to perform
command injection and elevate privileges to root.

Affected Products
Cisco AsyncOS for Cisco WSA, both virtual and hardware appliances.
Vulnerable releases:
Prior to 12.0.3-005
From 12.5 Prior to 12.5.2

QID Detection Logic (Authenticated):
The Qid checks for the Vulnerable version of Cisco WSA in the response of "version" command.

A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system
and elevate privileges to root. An attacker would need a valid user account with the rights to
upload configuration files to exploit this vulnerability.