-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Cisco Security Advisory: Cisco Cloud Services Platform 2100 Command Injection Vulnerability Advisory ID: cisco-sa-20160921-csp2100-1 Revision 1.0 Published: 2016 September 21 16:00 GMT +--------------------------------------------------------------------- Summary ======= A vulnerability in the web-based GUI of the Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system with the privileges of the root user. The vulnerability is due to insufficient sanitization of user-supplied input. An attacker could exploit this vulnerability by authenticating to the affected system with administrative privileges and inserting arbitrary commands. An exploit could allow the attacker to execute arbitrary commands on the host operating system with the privileges of root. Cisco has released software updates that address this vulnerability. Workarounds that address this vulnerability are not available. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1 -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJX4qcEAAoJEK89gD3EAJB5pnQP/RkhC3wsUC1bPwmPjleqpSck d8GvNrfAw+3GgMkMj0WFoHKvszo2/Cm6Ao1mIz+Rc/D+g2uZOQmmnuxXflc4Trip Vx+jjSwH02j3q55sj8bGDrSezmpHLEshKn85Z2wBYFRqydxkXwUXHiFpLJ7KKv1n 8ASMBScusjxc63KrleLFpUy4vdVtnvVSqlnwVrb36DrPnBQ2r2UpVGtQAvkaUU4h V8wOfi+kR7bTXYPkBV480BKaTWA/W9XJVxlYPYhuo+KY049E5osk68rEeXYWpC1H k41aT3iaLcdz/0m7tm/ycBjci/97bAbwiG4Kl4zOXa429iK5R4/sqgLsh1TyoQ71 OmjxZj6LvR3E3R+lONm8Htv80W8VGWRpeNTr9hPFC+mtHTx1dAl821oJC7xs8Q/W 46isqjdYUohUa+aN/ZJyYJeUfC2DRHE4X6KtPR/fry7sWgFzPWzVKZU4tEjlTDPT 8LfNgXb6pegRyLZmgd73lv0ngGRwZBFVuXqL9kNFPgXf7X3PTihUWcgQ/yFuXgDo wVQmLEYzzxnt7/T2TVgLZ8c5jm70kFjWHWxwumVYliEnfXYWuOKHE2hPXuk9T9W8 RxD2ZBKI/gZtOimzLFdQIqvbqJ1V6gbo5aZDQGWgdLwfdMaIefhAdUfCSCqQwrHe SKPu1igJkamlZfkkl26P =SK2h -----END PGP SIGNATURE-----
