Cisco IOx におけるパストラバーサルの脆弱性
| Title |
Cisco IOx におけるパストラバーサルの脆弱性
|
| Summary |
Cisco IOx には、パストラバーサルの脆弱性が存在します。 ベンダは、本脆弱性を Bug ID CSCuy52302 として公開しています。
|
| Possible impacts |
情報を取得される可能性があります。 |
| Solution |
ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date |
March 22, 2017, midnight |
| Registration Date |
April 24, 2017, 7:25 p.m. |
| Last Update |
April 24, 2017, 7:25 p.m. |
|
CVSS3.0 : 重要
|
| Score |
7.5
|
| Vector |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
CVSS2.0 : 警告
|
| Score |
5
|
| Vector |
AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected System
| シスコシステムズ |
|
Cisco IOx 1.0.0.0
|
|
Cisco IOx 1.1.0.0
|
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
| No |
Changed Details |
Date of change |
| 0 |
[2017年04月24日]
掲載 |
Feb. 17, 2018, 10:37 a.m. |
NVD Vulnerability Information
CVE-2017-3851
| Summary |
A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read any file from the CAF in the virtual instance running on the affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting crafted requests to the CAF web interface. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52302.
|
| Publication Date |
March 23, 2017, 4:59 a.m. |
| Registration Date |
Jan. 26, 2021, 1:24 p.m. |
| Last Update |
Nov. 21, 2024, 12:26 p.m. |
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:cisco:iox:1.1\(0\):*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:cisco:iox:1.1.0:*:*:*:*:*:*:* |
|
|
|
|
Related information, measures and tools
Common Vulnerabilities List