CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-4244
https://notcve.org/view.php?id=CVE-2015-4244
10 Jul 2015 — The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash (CF) file, aka Bug ID CSCuu75278. La ejecución del arranque en dispositivos Cisco ASR 5000 y 5500 con versión de software 14.0 permite a usuarios locales ejecutar arbitrariamente comandos Linux al aprovechar privilegios de administrador y guardar dichos comandos en un dispositivo Compact F... • http://tools.cisco.com/security/center/viewAlert.x?alertId=39677 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2014-3331
https://notcve.org/view.php?id=CVE-2014-3331
20 Aug 2014 — The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to cause a denial of service (process crash) via a crafted TCP packet, aka Bug ID CSCuo21914. El componente Session Manager en Packet Data Network Gateway (también conocido como PGW) en Cisco ASR serie 5000 Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x hasta 16.1.2, y 17.0 permite a atacantes remotos causar una ... • http://secunia.com/advisories/60706 • CWE-20: Improper Input Validation •