mobility services engine vulnerabilities and exploits

(subscribe to this query)

578

VMScore

The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) up to and including 8.0.120.7 allows logins by the oracle account, which makes it easier for remote malicious users to obtain access by entering this account's hardcoded password in an SSH sessi...

Cisco Mobility Services Engine 7.6.132.0 Cisco Mobility Services Engine 8.0 Base Cisco Mobility Services Engine 8.0\\(110.0\\)Cisco Mobility Services Engine 7.0 Base Cisco Mobility Services Engine 7.4 Base Cisco Mobility Services Engine 7.4.100.0 Cisco Mobility Services Engine 7.4.110.0 Cisco Mobility Services Engine 5.1 Base Cisco Mobility Services Engine 6.0 Base Cisco Mobility Services Engine 7.4.121.0 Cisco Mobility Services Engine 7.6.100.0 Cisco Mobility Services Engine 5.2 Base Cisco Mobility Services Engine 7.5.102.101 Cisco Mobility Services Engine 7.6.120.0

614

VMScore

Cisco Mobility Services Engine (MSE) up to and including 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.

Cisco Mobility Services Engine 5.1 Base Cisco Mobility Services Engine 8.0\\(110.0\\)Cisco Mobility Services Engine 7.4.100.0 Cisco Mobility Services Engine 7.4.110.0 Cisco Mobility Services Engine 7.4.121.0 Cisco Mobility Services Engine 7.5.102.101 Cisco Mobility Services Engine 6.0 Base Cisco Mobility Services Engine 7.4 Base Cisco Mobility Services Engine 7.6.100.0 Cisco Mobility Services Engine 7.6.132.0 Cisco Mobility Services Engine 5.2 Base Cisco Mobility Services Engine 7.0 Base Cisco Mobility Services Engine 7.6.120.0 Cisco Mobility Services Engine 8.0 Base

445

VMScore

Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote malicious users to obtain an unauthenticated session to the database-replication port, and consequently obtain sensitive information, via an SSL connection, aka Bug ID CSCue50794.

Cisco Mobility Services Engine -

641

VMScore

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local malicious user to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70...

Cisco Mobility Services Engine 8.3.102.0

356

VMScore

Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792.

Cisco Mobility Services Engine 8.0\\(110.0\\)

356

VMScore

The Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1) allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851.

Cisco Mobility Services Engine 10.0\\(0.1\\)

445

VMScore

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote malicious user to determine whether a subscriber username is valid. The vulnerability occurs because the Cisco Policy Suite RADIUS server component returns different a...

Cisco Mobility Services Engine 13.1.0 Cisco Mobility Services Engine 13.0.0

605

VMScore

The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.

Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)

570

VMScore

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote malicious user to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to in...

Cisco Mobility Services Engine 14.0.0 Cisco Mobility Services Engine 13.1.0 Cisco Mobility Services Engine 13.0.0

890

VMScore

A vulnerability in the Cluster Manager of Cisco Policy Suite prior to 18.2.0 could allow an unauthenticated, remote malicious user to log in to an affected system using the root account, which has default, static user credentials. The vulnerability is due to the presence of undoc...

Cisco Policy Suite Cisco Mobility Services Engine 14.0.0

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook