Actu
Vigil@nce - Cisco IOS XR: privilege escalation
September 2016 by Vigil@nce
This bulletin was written by Vigil@nce : https://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An authenticated attacker can inject commands in the CLI of Cisco
IOS XR, in order to escalate his privileges.
Impacted products: IOS XR Cisco, Cisco Router.
Severity: 2/4.
Creation date: 15/07/2016.
DESCRIPTION OF THE VULNERABILITY
The Cisco IOS XR product offers a command line interface (CLI) to
users.
However, a user can inject data in the CLI, in order to execute
commands with root privileges.
An authenticated attacker can therefore inject commands in the CLI
of Cisco IOS XR, in order to escalate his privileges.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
https://vigilance.fr/vulnerability/Cisco-IOS-XR-privilege-escalation-20120
