Elevated Privileges Vulnerability in Cisco Application Policy Infrastructure Controllers

CVE-2017-12352

Summary

A vulnerability exists in specific system script files installed during the boot process of Cisco Application Policy Infrastructure Controllers. This flaw allows an authenticated local attacker to escalate their privileges, thereby executing arbitrary commands with root-level access on the affected host operating system. The vulnerability stems from inadequate validation of user-controlled input submitted to these script files. To execute this attack, an attacker must gain access using valid administrator credentials and can exploit the vulnerability by providing specially crafted inputs. Successful exploitation results in the ability to manipulate system functionality and potentially compromise critical system components.

References