https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:24:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06104 bdu:2024-06104 https://cve.radiocsirt.org/vuln/bdu:2024-06104 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0602 certfr-2024-avi-0602 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0602 https://cve.radiocsirt.org/vuln/cisco-sa-swa-priv-esc-7uhpzscc <p>A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-swa-priv-esc-7uhpzscc https://cve.radiocsirt.org/vuln/euvd-2026-3673 EUVD-2026-3673 https://cve.radiocsirt.org/vuln/euvd-2026-3673 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20435 <p>A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.</p> <p>A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20435 https://cve.radiocsirt.org/vuln/ghsa-p6xf-x5px-f2vq <p>A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root.</p> <p>This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.</p> <p>A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root.</p> <p>This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-p6xf-x5px-f2vq https://cve.radiocsirt.org/vuln/gsd-2024-20435 gsd-2024-20435 https://cve.radiocsirt.org/vuln/gsd-2024-20435 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1664 <p>Ein lokaler Angreifer kann eine Schwachstelle in Cisco Secure Web Appliance ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Code auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Cisco Secure Web Appliance ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1664