CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: the device manager gui in cisco application control engine (ace) 4710 a5 before a5(3.1) allows remote authenticated users to bypass intended rbac restrictions and execute arbitrary cli commands with admin privileges via an unspecified parameter in a post request, aka bug id cscul84801.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-02-26
Last Modified Date: 2016-12-06