A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of GUI command arguments. An attacker could exploit this vulnerability by injecting crafted arguments into a vulnerable GUI command. An exploit could allow the attacker to execute commands on the underlying BusyBox operating system. These commands are run at the privilege level of the authenticated user. The attacker needs valid device credentials for this attack. Cisco Bug IDs: CSCvg74691.
Metrics
Affected Vendors & Products
References
History
Mon, 02 Dec 2024 22:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2018-01-18T06:00:00
Updated: 2024-12-02T21:43:34.617Z
Reserved: 2017-11-27T00:00:00
Link: CVE-2018-0099
Vulnrichment
Updated: 2024-08-05T03:14:16.619Z
NVD
Status : Modified
Published: 2018-01-18T06:29:01.003
Modified: 2024-11-21T03:37:31.117
Link: CVE-2018-0099
Redhat
No data.