← العودة للجدول
CVE-2017-12229
CVE-2017-12229 — A vulnerability in the REST API of the web-based user interface (web UI) of Cisc
📅 2017-09-29
🔴 Critical 🔥 No NVD Exploit Cisco CVSS 9.8 🎯 EPSS 9.26%

📋 الوصف الكامل

A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to bypass authentication to the REST API of the web UI of the affected software. The vulnerability is due to insufficient input validation for the REST API of the affected software. An attacker could exploit this vulnerability by sending a malici

💻 الأنظمة المتأثرة

Cisco IOS XE 17.x

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2017-12229

📡 المصدر

NVD

✅ الحلول والتخفيف

Cisco Security Advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←