Arbitrary Command Execution Vulnerability in CiscoWorks Common Services

CVE-2011-3310

Summary

The Home Page component in CiscoWorks Common Services prior to version 4.1 on Windows contains a vulnerability that enables remote authenticated users to execute arbitrary commands through specially crafted URLs. This exposure poses significant security risks to affected systems, as it can potentially be exploited to gain unauthorized access or control over critical network infrastructure. Various Cisco solutions, including LAN Management Solution and Unified Operations Manager, are impacted, necessitating prompt remediation for affected installations.

References