| ID |
CVE-2007-4263
|
| Summary |
Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 8.5 (as of 29-09-2017 - 01:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
SINGLE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:S/C:C/I:C/A:C
|
| oval
via4
|
| accepted | 2008-09-08T04:00:26.720-04:00 | | class | vulnerability | | contributors | | name | Yuzheng Zhou | | organization | Hewlett-Packard |
| | description | Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors. | | family | ios | | id | oval:org.mitre.oval:def:5542 | | status | accepted | | submitted | 2008-05-26T11:06:36.000-04:00 | | title | Cisco IOS 12.2 Secure Copy Security Bypass Vulnerability | | version | 3 |
|
| refmap
via4
|
| bid | 25240 | | cisco | 20070808 Cisco IOS Secure Copy Authorization Bypass Vulnerability | | osvdb | 36694 | | sectrack | 1018534 | | secunia | 26361 | | vupen | ADV-2007-2817 | | xf | cisco-ios-scp-file-overwrite(35872) |
|
| Last major update |
29-09-2017 - 01:29 |
| Published |
08-08-2007 - 23:17 |
| Last modified |
29-09-2017 - 01:29 |
