CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-1911 – Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability
https://notcve.org/view.php?id=CVE-2019-1911
A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges. Una vulnerabilidad en la CLI del software Communications Domain Manager de Cisco Unified (CDM de Cisco Unified), podría permitir a un atacante local identificado escapar del shell restringido. • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucdm-rsh • CWE-216: DEPRECATED: Containment Errors (Container Errors) •
CVSS: 6.5EPSS: 0%CPEs: 12EXPL: 0CVE-2015-0750
https://notcve.org/view.php?id=CVE-2015-0750
The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786. La interfaz web administrativa en Cisco Hosted Collaboration Solution (HCS) 10.6(1) y anteriores permite a usuarios remotos autenticados ejecutar comandos arbitrarios a través de entradas manipuladas en campos no especificados, también conocido como Bug ID CSCut02786. • http://tools.cisco.com/security/center/viewAlert.x?alertId=38969 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-0741
https://notcve.org/view.php?id=CVE-2015-0741
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596. Múltiples vulnerabilidades de CSRF en Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) y anteriores permiten a atacantes remotos secuestrar la autenticación de usuarios arbitrarios, también conocido como Bug ID CSCut04596. • http://tools.cisco.com/security/center/viewAlert.x?alertId=38927 http://www.securityfocus.com/bid/74754 http://www.securitytracker.com/id/1032380 • CWE-352: Cross-Site Request Forgery (CSRF) •