4.6
CVE-2006-0485
- EPSS 0.35%
- Veröffentlicht 01.02.2006 02:02:00
- Zuletzt bearbeitet 16.06.2026 22:20:42
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.264 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/18613
http://securitytracker.com/id?1015543
http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml
http://www.osvdb.org/34892
http://www.securityfocus.com/bid/16383
http://www.vupen.com/english/advisories/2006/0337
https://exchange.xforce.ibmcloud.com/vulnerabilities/24308
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5836