PT-2017-17268 · Autoit+1 · Autoit+1

Publicado 2017-07-06 · Atualizado 2019-10-09 · CVE-2017-6714

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Staging Server versions prior to 5.0.3 Cisco Ultra Services Framework Staging Server versions prior to 5.1

Description A vulnerability in the AutoIT service could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The issue is due to improper shell invocations. An attacker could exploit this by crafting CLI command inputs to execute Linux shell commands as the root user.

Recommendations For versions prior to 5.0.3, update to Release 5.0.3 or later. For versions prior to 5.1, update to Release 5.1 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2017-6714

Produtos afetados

Autoit

Cisco Ultra Services Framework Staging Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-6714 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf3 · Aviso do Fabricante
• http://securityfocus.com/bid/99436 · Nota
• https://osv.dev/vulnerability/CVE-2017-6714 · Aviso do Fabricante