A vulnerability in Cisco BroadWorks could allow an authenticated, local malicious user to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the malicious user to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco broadworks_application_delivery_platform_firmware 23.0 |
||
cisco broadworks_application_delivery_platform_firmware 24.0 |
||
cisco broadworks_application_delivery_platform_firmware 25.0 |
||
cisco broadworks_application_server_firmware 23.0 |
||
cisco broadworks_application_server_firmware 24.0 |
||
cisco broadworks_application_server_firmware 25.0 |
||
cisco broadworks_database_server_firmware 23.0 |
||
cisco broadworks_database_server_firmware 24.0 |
||
cisco broadworks_database_server_firmware 25.0 |
||
cisco broadworks_database_troubleshooting_server_firmware 23.0 |
||
cisco broadworks_database_troubleshooting_server_firmware 24.0 |
||
cisco broadworks_database_troubleshooting_server_firmware 25.0 |
||
cisco broadworks_execution_server_firmware 23.0 |
||
cisco broadworks_execution_server_firmware 24.0 |
||
cisco broadworks_execution_server_firmware 25.0 |
||
cisco broadworks_media_server_firmware 23.0 |
||
cisco broadworks_media_server_firmware 24.0 |
||
cisco broadworks_media_server_firmware 25.0 |
||
cisco broadworks_messaging_server_firmware 23.0 |
||
cisco broadworks_messaging_server_firmware 24.0 |
||
cisco broadworks_messaging_server_firmware 25.0 |
||
cisco broadworks_network_database_server_firmware 23.0 |
||
cisco broadworks_network_database_server_firmware 24.0 |
||
cisco broadworks_network_database_server_firmware 25.0 |
||
cisco broadworks_network_function_manager_firmware 23.0 |
||
cisco broadworks_network_function_manager_firmware 24.0 |
||
cisco broadworks_network_function_manager_firmware 25.0 |
||
cisco broadworks_network_server_firmware 23.0 |
||
cisco broadworks_network_server_firmware 24.0 |
||
cisco broadworks_network_server_firmware 25.0 |
||
cisco broadworks_profile_server_firmware 23.0 |
||
cisco broadworks_profile_server_firmware 24.0 |
||
cisco broadworks_profile_server_firmware 25.0 |
||
cisco broadworks_service_control_function_server_firmware 23.0 |
||
cisco broadworks_service_control_function_server_firmware 24.0 |
||
cisco broadworks_service_control_function_server_firmware 25.0 |
||
cisco broadworks_sharing_server_firmware 23.0 |
||
cisco broadworks_sharing_server_firmware 24.0 |
||
cisco broadworks_sharing_server_firmware 25.0 |
||
cisco broadworks_video_server_firmware 23.0 |
||
cisco broadworks_video_server_firmware 24.0 |
||
cisco broadworks_video_server_firmware 25.0 |
||
cisco broadworks_webrtc_server_firmware 23.0 |
||
cisco broadworks_webrtc_server_firmware 24.0 |
||
cisco broadworks_webrtc_server_firmware 25.0 |
||
cisco broadworks_xtended_services_platform_firmware 23.0 |
||
cisco broadworks_xtended_services_platform_firmware 24.0 |
||
cisco broadworks_xtended_services_platform_firmware 25.0 |
Vulmon