CVE-2020-3151— Cisco Connected Mobile Experiences 授权问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2020-3151の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Connected Mobile Experiences Restricted Shell Escape Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to bypass restrictions on the CLI. The vulnerability is due to insufficient security mechanisms in the restricted shell implementation. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A successful exploit could allow the attacker to escape the restricted shell and execute a set of normally unauthorized commands with the privileges of a non-root user. To exploit this vulnerability, an attacker would need to have valid administrative credentials.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
认证机制不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco Connected Mobile Experiences 授权问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Connected Mobile Experiences是美国思科（Cisco）公司的一个互联移动体验。 Cisco CMX 10.6.0版本、10.6.1版本和10.6.2版本中的CLI存在授权问题漏洞，该漏洞源于不当的安全机制。本地攻击者可通过发送特制的命令利用该漏洞绕过被限制的shell并以非root用户权限执行未授权的命令。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Connected Mobile Experiences | n/a | - |
II. CVE-2020-3151の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2020-3151のインテリジェンス情報
请登录查看更多情报信息。
CVE-2020-3151 厂商安全公告 (1)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmx-rshell-esc-L6hBwjbgvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2020-08-26 · 22 CVEs total
| CVE-2020-3443 | 8.8 HIGH | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability |
| CVE-2020-3507 | 8.8 HIGH | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu |
| CVE-2020-3506 | 8.8 HIGH | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu |
| CVE-2020-3523 | 6.5 MEDIUM | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability |
| CVE-2020-3518 | 6.5 MEDIUM | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability |
| CVE-2020-3505 | 6.5 MEDIUM | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulne |
| CVE-2020-3522 | 6.3 MEDIUM | Cisco Data Center Network Manager Authorization Bypass Vulnerability |
| CVE-2020-3485 | 6.3 MEDIUM | Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability |
| CVE-2020-3491 | 5.5 MEDIUM | Cisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability |
| CVE-2020-3520 | 5.5 MEDIUM | Cisco Data Center Network Manager Information Disclosure Vulnerability |
| CVE-2020-3484 | 5.3 MEDIUM | Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerabi |
| CVE-2020-3521 | 5.3 MEDIUM | Cisco Data Center Network Manager Read File Path Traversal Vulnerability |
| CVE-2020-3490 | 4.9 MEDIUM | Cisco Vision Dynamic Signage Director Path Traversal Vulnerability |
| CVE-2020-3152 | Cisco Connected Mobile Experiences Privilege Escalation Vulnerability | |
| CVE-2020-3496 | Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability | |
| CVE-2020-3466 | Cisco DNA Center Cross-Site Scripting Vulnerabilities | |
| CVE-2020-3446 | Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnera | |
| CVE-2020-3519 | Cisco Data Center Network Manager Path Traversal Vulnerability | |
| CVE-2020-3440 | Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability | |
| CVE-2020-3439 | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability |
Showing 20 of 22 CVEs. View all on vendor page →
IV. 関連脆弱性
- CVE-2021-1522
Cisco Connected Mobile Experiences Strong Authentication Req - CVE-2021-1144
Cisco Connected Mobile Experiences Privilege Escalation Vuln - CVE-2021-1143
Cisco Connected Mobile Experiences User Enumeration Vulnerab - CVE-2020-3152
Cisco Connected Mobile Experiences Privilege Escalation Vuln - CVE-2019-1645
Cisco Connected Mobile Experiences Information Disclosure Vu
同じベンダー: Cisco
- CVE-2026-20243
ClamAV ALZ Archive Processing Denial of Service Vulnerabilit - CVE-2026-20244
ClamAV DMG File Processing Denial of Service Vulnerability - CVE-2026-20215
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corr - CVE-2026-20217
ClamAV PESpin File Format Processing Out-of-Bounds Memory Co - CVE-2026-20216
ClamAV InstallShield File Format Processing Resource Exhaust
同じ弱点: CWE-287
- CVE-2026-15542
will-moss Isaiah Websocket Connection Authentication main.go - CVE-2026-12761
miniOrange Social Login and Register (Discord, Google, Twitt - CVE-2026-57216
RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enf - CVE-2026-55377
Logto: Account Center MFA management step-up bypass via WebA - CVE-2026-59151
Prowler: SAML Domain Claiming Enables Cross-Tenant Account T
V. CVE-2020-3151へのコメント
まだコメントはありません