CWE Code: 74
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary: a vulnerability in the cronjob scheduler api of cisco digital network architecture (dna) center could allow an authenticated, remote attacker to perform a command injection attack. the vulnerability is due to incorrect input validation of user-supplied data. an attacker could exploit this vulnerability by sending a malicious packet. a successful exploit could allow the attacker to execute arbitrary commands with root privileges. cisco bug ids: cscvi42263.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-08-15
Last Modified Date: 2019-10-09