CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Cisco. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 30.5% probability of exploitation in the next 30 days. It may be remotely exploitable.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the web application on the underlying operating system of an affected Cisco Modeling Labs server. This vulnerability is due to insufficient validation of user-supplied input to the web UI. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected server. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the web application, virl2, on the underlying operating system of the affected server. To exploit this vulnerability, the attacker must have valid user credentials on the web UI.
Related CVEs
Other vulnerabilities affecting the same vendor(s)