← Back

Remote Phy Shelf 7200 Firmware

remote_phy_shelf_7200_firmware

Vendor: Cisco • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cisco
3Remote Phy 120 Firmware
Remote Phy 220 FirmwareRemote Phy Shelf 7200 Firmware
Nov 21, 2024
Mar 4, 2020
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exists beca...Show more
A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exists because the affected software does not properly sanitize user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying certain CLI commands with crafted arguments. A successful exploit could allow the attacker to run arbitrary commands as the root user, which could result in a complete system compromise.Show less
1Cisco
4Cbr 8 Firmware
Remote Phy 120 FirmwareRemote Phy 220 Firmware+1 more
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs beca...Show more
A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying various CLI commands with crafted arguments. A successful exploit could allow the attacker to run arbitrary commands as the root user, allowing complete compromise of the system.Show less