deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-7453
Published: 2017-04-06
Description: The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/97497; https://github.com/jsummers/imageworsener/issues/9; https://security.gentoo.org/glsa/201706-06
CVE: CVE-2017-7454
Published: 2017-04-06
Description: The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97494; https://github.com/jsummers/imageworsener/issues/11; https://security.gentoo.org/glsa/201706-06
CVE: CVE-2017-0305
Published: 2017-04-06
Description: F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus SNAT Auto Map option for egress traffic.
CVSS Score: 9.8 (CRITICAL)
References: https://support.f5.com/csp/article/K53244431; https://support.f5.com/csp/article/K53244431
CVE: CVE-2017-5887
Published: 2017-04-06
Description: WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur in the initStreamsWithData function).
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://seclists.org/bugtraq/2017/Apr/67; https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6; https://github.com/daltoniam/Starscream/releases/tag/2.0.4
CVE: CVE-2017-6130
Published: 2017-04-06
Description: F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: https://support.f5.com/csp/article/K23001529; https://support.f5.com/csp/article/K23001529
CVE: CVE-2017-6968
Published: 2017-04-06
Description: GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03.
CVSS Score: 8.8 (HIGH)
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/; https://www.ptsecurity.com/ww-en/analytics/threatscape/
CVE: CVE-2017-7192
Published: 2017-04-06
Description: WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://seclists.org/bugtraq/2017/Apr/66; https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6; https://github.com/daltoniam/Starscream/releases/tag/2.0.4
CVE: CVE-2016-10319
Published: 2017-04-06
Description: In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into secure memory because of integer overflows. This affects certain cases involving execution of both AArch64 Generic Trusted Firmware (TF) BL1 code and other firmware update code.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-190
References: https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-1; https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-1
CVE: CVE-2017-2675
Published: 2017-04-06
Description: Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons.
CVSS Score: 7.8 (HIGH)
References: https://twitter.com/patrickwardle/status/[PII_REDACTED]70711552; https://www.obdev.at/products/littlesnitch/releasenotes.html; https://twitter.com/patrickwardle/status/[PII_REDACTED]70711552
CVE: CVE-2017-7237
Published: 2017-04-06
Description: The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ (aka Write request) operation for a configuration file or an executable file.
CVSS Score: 9.8 (CRITICAL)
References: http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER-ACCESS-CONTROL-FILE-OVERWRITE.txt; https://community.spiceworks.com/support/inventory/docs/network-config#security; https://www.exploit-db.com/exploits/41825/
CVE: CVE-2017-7565
Published: 2017-04-06
Description: Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://www.splunk.com/view/SP-CAAAP2F; https://www.splunk.com/view/SP-CAAAP2F
CVE: CVE-2017-7566
Published: 2017-04-06
Description: MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: http://www.securityfocus.com/bid/97480; https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/; https://github.com/mybb/mybb/commit/f5de8fc2aad11e0d2583f585535ccfa2b46325db#diff-7fe6e55397c77ab9a0f5d57bc4cbe5b9R6781
CVE: CVE-2017-6884
Published: 2017-04-06
Description: A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.exploit-db.com/exploits/41782/; https://www.exploit-db.com/exploits/41782/; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6884
CVE: CVE-2017-7569
Published: 2017-04-06
Description: In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4367744-vbulletin-5-3-0-connect-is-now-available; https://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4367744-vbulletin-5-3-0-connect-is-now-available
CVE: CVE-2017-7571
Published: 2017-04-06
Description: public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://rungga.blogspot.co.id/2017/04/csrf-privilege-escalation-manipulation.html; http://www.securityfocus.com/bid/97493; https://github.com/ladybirdweb/faveo-helpdesk/issues/446
CVE: CVE-2016-10320
Published: 2017-04-06
Description: textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://seclists.org/oss-sec/2016/q4/442; http://seclists.org/oss-sec/2016/q4/442
CVE: CVE-2016-9194
Published: 2017-04-06
Description: A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of the 802.11 WME packet header. An attacker could exploit this vulnerability by sending malformed 802.11 WME frames to a targeted device. A successful exploit could allow the attacker to cause the WLC to reload unexpectedly. The fixed versions are 8.0.140.0, 8.2.130.0, and 8.3.111.0. Cisco Bug IDs: CSCva86353.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399, CWE-399
References: http://www.securityfocus.com/bid/97424; http://www.securitytracker.com/id/1038182; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc
CVE: CVE-2016-9219
Published: 2017-04-06
Description: A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this vulnerability by sending a crafted IPv6 UDP packet to a specific port on the targeted device. An exploit could allow the attacker to impact the availability of the device as it could unexpectedly reload. This vulnerability affects Cisco Wireless LAN Controller (WLC) running software version 8.2.121.0 or 8.3.102.0. Cisco Bug IDs: CSCva98592.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/97423; http://www.securitytracker.com/id/1038183; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc2
CVE: CVE-2017-3832
Published: 2017-04-06
Description: A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An attacker could exploit this vulnerability by accessing a specific hidden URL on the GUI web management interface. A successful exploit could allow the attacker to cause a reload of the device, resulting in a DoS condition. This vulnerability affects only the Cisco Wireless LAN Controller 8.3.102.0 release. Cisco Bug IDs: CSCvb48198.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264, CWE-755
References: http://www.securityfocus.com/bid/97421; http://www.securitytracker.com/id/1038184; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc3
CVE: CVE-2017-3834
Published: 2017-04-06
Description: A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated, remote attacker to take complete control of an affected device. The vulnerability is due to the existence of default credentials for an affected device that is running Cisco Mobility Express Software, regardless of whether the device is configured as a master, subordinate, or standalone access point. An attacker who has layer 3 connectivity to an affected device could use Secure Shell (SSH) to log in to the device with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points that are running an 8.2.x release of Cisco Mobility Express Software prior to Release 8.2.111.0, regardless of whether the device is configured as a master, subordinate, or standalone access point. Release 8.2 was the first release of Cisco Mobility Express Software for next generation Cisco Aironet Access Points. Cisco Bug IDs: CSCva50691.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255, CWE-1188
References: http://www.securityfocus.com/bid/97422; http://www.securitytracker.com/id/1038181; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ame
CVE: CVE-2017-7572
Published: 2017-04-06
Description: The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condition (time of check, time of use). With this authorization method, the owner of a process requesting a polkit operation is checked by polkitd via /proc/<pid>/status, by which time the requesting process may have been replaced by a different process with the same PID that has different privileges then the original requester.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://github.com/bit-team/backintime/commit/7f208dc547f569b689c888103e3b593a48cd1869; https://github.com/bit-team/backintime/commit/7f208dc547f569b689c888103e3b593a48cd1869
CVE: CVE-2016-5349
Published: 2017-04-06
Description: The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment (QSEE) only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications inside Qualcomm Secure Execution Environment (QSEE) receive memory addresses from a high level operating system (HLOS) such as Linux Android, those address have previously been verified as belonging to HLOS memory space rather than QSEE memory space, but they were not verified to be from HLOS user space rather than kernel space. This lack of verification could lead to privilege escalation within the HLOS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97364; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-4964
Published: 2017-04-06
Description: Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a "CPI code injection vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://www.cloudfoundry.org/cve-2017-4964/; https://www.cloudfoundry.org/cve-2017-4964/
CVE: CVE-2015-8965
Published: 2017-04-06
Description: Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or administration code. The issue exists because the ilog.views.faces.IlvFacesController servlet in jviews-framework-all.jar does not require explicit configuration of servlets that can be called.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://rwkbp.makekb.com/?View=entry&EntryID=2521; https://www.oracle.com/security-alerts/cpujan2021.html; https://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html
CVE: CVE-2016-6809
Published: 2017-04-06
Description: Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://seclists.org/bugtraq/2016/Nov/40; http://www.securityfocus.com/bid/94247; https://dist.apache.org/repos/dist/release/tika/CHANGES-1.14.txt
CVE: CVE-2016-8735
Published: 2017-04-06
Description: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
CVSS Score: 9.8 (CRITICAL)
References: http://rhn.redhat.com/errata/RHSA-2017-0457.html; http://seclists.org/oss-sec/2016/q4/502; http://svn.apache.org/viewvc?view=revision&revision=1767644
CVE: CVE-2017-7574
Published: 2017-04-06
Description: Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML file is AES-CBC encrypted; however, the key used for encryption (SoMachineBasicSoMachineBasicSoMa) cannot be changed. After decrypting the XML file with this key, the user password can be found in the decrypted data. After reading the user password, the project can be opened and modified with the Schneider product.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-097-01; http://www.securityfocus.com/bid/97518; https://os-s.net/advisories/OSS-2017-02.pdf
CVE: CVE-2017-7575
Published: 2017-04-06
Description: Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-097-02; http://www.securityfocus.com/bid/97523; https://os-s.net/advisories/OSS-2017-01.pdf
CVE: CVE-2017-7576
Published: 2017-04-06
Description: DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in recent versions including 1.4.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://blog.iancaling.com/post/[PII_REDACTED]3/; http://blog.iancaling.com/post/[PII_REDACTED]3/
CVE: CVE-2015-4673
Published: 2017-04-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the collection_description parameter to upload/manage_collections.php in an add_new action or the (2) photo_description, (3) photo_tags, or (4) photo_title parameter to upload/actions/photo_uploader.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://secpod.org/advisories/SecPod_ClipBucket_Multiple_XSS_Vuln.txt; http://secpod.org/advisories_cvrf/SecPod_ClipBucket_Multiple_XSS_Vuln.xml; http://www.secpod.com/blog/clipbucket-2-7-0-5-multiple-stored-cross-site-scripting-vulnerability/
CVE: CVE-2[PII_REDACTED]
Published: 2017-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2[PII_REDACTED]. Reason: This candidate is a reservation duplicate of CVE-2[PII_REDACTED]. Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-04-06
Description: Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (1) profile_desc, about_me, schools, occupation, companies, hobbies, fav_movies, fav_music, fav_books parameters to ProfileSettings page; (2) note parameter to PersonalNotes Section; (3) closed_msg, description, allowed_types parameters to WebsiteConfigurations Section. NOTE: the collection_description vector is already covered by CVE-2015-4673.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/distributedweaknessfiling/DWF-Database-Artifacts/blob/master/DWF/2016/1000307/CVE-2[PII_REDACTED].json; https://github.com/distributedweaknessfiling/DWF-Database-Artifacts/blob/master/DWF/2016/1000307/CVE-2[PII_REDACTED].json
CVE: CVE-2017-7570
Published: 2017-04-07
Description: PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://gist.github.com/X1nda/749b6aac6e080624d9f8ec81321335df; https://gist.github.com/X1nda/749b6aac6e080624d9f8ec81321335df
CVE: CVE-2017-7577
Published: 2017-04-07
Description: XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt; http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt
CVE: CVE-2017-7578
Published: 2017-04-07
Description: Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/libming/libming/issues/68; https://github.com/libming/libming/issues/68
CVE: CVE-2017-2387
Published: 2017-04-07
Description: The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: http://www.info-sec.ca/advisories/Apple-Music.html; http://www.securityfocus.com/bid/97390; https://support.apple.com/HT207605
CVE: CVE-2017-7579
Published: 2017-04-07
Description: inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.phpmyfaq.de/security/advisory-2017-04-02; https://github.com/thorsten/phpMyFAQ/commit/a69f32175c28af1b34e5df83000f830e60f6bce9; http://www.phpmyfaq.de/security/advisory-2017-04-02
CVE: CVE-2016-9195
Published: 2017-04-07
Description: A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition by disconnecting a single connection. This vulnerability affects Cisco Wireless LAN Controller running software release 8.3.102.0. More Information: CSCvb01835. Known Fixed Releases: 8.4(1.49) 8.3(111.0) 8.3(108.0) 8.3(104.24) 8.3(102.3).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/97425; http://www.securitytracker.com/id/1038188; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc1
CVE: CVE-2016-9196
Published: 2017-04-07
Description: A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. More Information: CSCvb13893. Known Affected Releases: 8.2(121.0) 8.3(102.0). Known Fixed Releases: 8.4(1.53) 8.4(1.52) 8.3(111.0) 8.3(104.23) 8.2(130.0) 8.2(124.1).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97468; http://www.securitytracker.com/id/1038187; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-aironet
CVE: CVE-2016-9197
Published: 2017-04-07
Description: A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected Releases: 8.3(102.0).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97469; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cme; http://www.securityfocus.com/bid/97469