Advisories · Weakness

CWE-264.

Every Advisory and CVE whose sources give the weakness CWE-264, newest first.

CVE-2019-1594 CVE record

CVSS 7.4 High

Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability
- Cisco Nexus 1000V Switch for VMware vSphere
- Cisco Nexus 3000 Series Switches
- CWE-264
Not analysed yet 6 Mar 2019
CVE-2019-1593 CVE record

CVSS 7.8 High

Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- CWE-264
Not analysed yet 6 Mar 2019
CVE-2019-1591 CVE record

CVSS 7.8 High

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability
- Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode
- CWE-264
Not analysed yet 6 Mar 2019
CVE-2019-3475 CVE record

CVSS 7.8 High

Local privilege escalation in Filr famtd
- Micro Focus Filr
- CWE-264
Not analysed yet 20 Feb 2019
CVE-2019-1648 CVE record

CVSS 7.8 High

Cisco SD-WAN Solution Privilege Escalation Vulnerability
- Cisco SD-WAN Solution
- CWE-264
Not analysed yet 24 Jan 2019
CVE-2019-1646 CVE record

CVSS 7.8 High

Privilege Escalation Vulnerability in Cisco SD-WAN Solution
- Cisco SD-WAN Solution
- CWE-264
Not analysed yet 24 Jan 2019
CVE-2018-11462 CVE record

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…
- Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CWE-264
Not analysed yet 12 Dec 2018
CVE-2018-11461 CVE record

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…
- Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8
- CWE-264
Not analysed yet 12 Dec 2018
CVE-2018-0284 CVE record

Cisco Meraki Local Status Page Privilege Escalation Vulnerability
- Cisco Meraki MR
- Cisco Meraki M5
- CWE-264
Not analysed yet 8 Nov 2018
CVE-2018-0417 CVE record

CVSS 7.5 High

Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability
- Cisco Wireless LAN Controller (WLC)
- CWE-264
Not analysed yet 17 Oct 2018
CVE-2018-13802 CVE record

A vulnerability has been identified in ROX II (All versions < V2.12.1).
- Siemens AG ROX II
- CWE-264
Not analysed yet 10 Oct 2018
CVE-2018-13801 CVE record

A vulnerability has been identified in ROX II (All versions < V2.12.1).
- Siemens AG ROX II
- CWE-264
Not analysed yet 10 Oct 2018
CVE-2018-15370 CVE record

Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability
- Cisco Catalyst 6800 Series Switches
- CWE-264
Not analysed yet 5 Oct 2018
CVE-2018-0463 CVE record

Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability
- Cisco Network Services Orchestrator
- CWE-264
Not analysed yet 5 Oct 2018
CVE-2018-0453 CVE record

Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability
- Cisco FireSIGHT System Software
- CWE-264
Not analysed yet 5 Oct 2018
CVE-2018-0440 CVE record

Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability
- Cisco Data Center Network Manager
- CWE-264
Not analysed yet 5 Oct 2018
CVE-2018-0437 CVE record

Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability
- Cisco Umbrella
- CWE-264
Not analysed yet 5 Oct 2018
CVE-2018-0432 CVE record

Cisco SD-WAN Solution Privilege Escalation Vulnerability
- Cisco SD-WAN Solution
- CWE-264
Not analysed yet 5 Oct 2018
CVE-2018-0399 CVE record

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system.
- Cisco Finesse unknown
- CWE-264
Not analysed yet 18 Jul 2018
CVE-2018-0398 CVE record

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack.
- Cisco Finesse unknown
- CWE-264
Not analysed yet 18 Jul 2018
CVE-2018-0330 CVE record

A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute command…
- Cisco NX-OS unknown
- CWE-264
Not analysed yet 20 Jun 2018
CVE-2018-0294 CVE record

A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affec…
- Cisco FXOS and NX-OS unknown
- CWE-264
Not analysed yet 20 Jun 2018
CVE-2018-0293 CVE record

A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative us…
- Cisco NX-OS unknown
- CWE-264
Not analysed yet 20 Jun 2018
CVE-2018-0352 CVE record

A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root.
- Cisco Wide Area Application Services unknown
- CWE-264
Not analysed yet 7 Jun 2018
CVE-2018-0336 CVE record

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level.
- Cisco Prime Collaboration Provisioning unknown
- CWE-264
Not analysed yet 7 Jun 2018
CVE-2018-0322 CVE record

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrar…
- Cisco Prime Collaboration Provisioning unknown
- CWE-264
Not analysed yet 7 Jun 2018
CVE-2018-0317 CVE record

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges.
- Cisco Prime Collaboration Provisioning unknown
- CWE-264
Not analysed yet 7 Jun 2018
CVE-2018-6674 CVE record

CVSS 6.8 Medium

Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges
- McAfee, LLC VirusScan Enterprise (VSE)
- Privilege escalation
- CWE-264
Not analysed yet 25 May 2018
CVE-2018-7505 CVE record

Advantech WebAccess: In Advantech WebAccess versions V8.2_20170817 and prior…
- Advantech WebAccess
- CWE-264
Not analysed yet 15 May 2018
CVE-2018-0184 CVE record

Cisco IOS XE: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0183 CVE record

Cisco IOS XE: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0176 CVE record

Cisco IOS XE: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0169 CVE record

Cisco IOS XE: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0152 CVE record

Cisco IOS XE Software: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could…
- Cisco IOS XE Software
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-5472 CVE record

Philips IntelliSpace Portal: Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows…
- Philips IntelliSpace Portal
- CWE-264
Not analysed yet 26 Mar 2018
CVE-2018-5468 CVE record

Philips IntelliSpace Portal: Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access…
- Philips IntelliSpace Portal
- CWE-264
Not analysed yet 26 Mar 2018
CVE-2018-7500 CVE record

OSIsoft PI Web API: A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API…
- OSIsoft PI Web API
- CWE-264
Not analysed yet 14 Mar 2018
CVE-2018-0213 CVE record

Cisco Identity Services Engine: A vulnerability in the credential reset functionality for Cisco Identity Services Engine…
- Cisco Identity Services Engine
- CWE-264
Not analysed yet 8 Mar 2018
CVE-2018-0130 CVE record

Cisco Elastic Services Controller: A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco…
- Cisco Elastic Services Controller
- CWE-264
Not analysed yet 22 Feb 2018
CVE-2018-0096 CVE record

Cisco Prime Infrastructure: A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime…
- Cisco Prime Infrastructure
- CWE-264
Not analysed yet 18 Jan 2018
CVE-2018-0095 CVE record

A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated, local attacker to es…
- Cisco Email Security and Content Security Management Appliance
- CWE-264
Not analysed yet 18 Jan 2018
CVE-2018-0092 CVE record

Cisco NX-OS: A vulnerability in the network-operator user role implementation for Cisco NX-OS System…
- Cisco NX-OS
- CWE-264
Not analysed yet 18 Jan 2018
CVE-2018-0089 CVE record

Cisco Policy Suite: A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy…
- Cisco Policy Suite
- CWE-264
Not analysed yet 18 Jan 2018
CVE-2017-12363 CVE record

Cisco WebEx Meeting Server: A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated…
- Cisco WebEx Meeting Server
- CWE-264
Not analysed yet 30 Nov 2017
CVE-2017-12351 CVE record

Cisco NX-OS: A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an…
- Cisco NX-OS
- CWE-264
Not analysed yet 30 Nov 2017
CVE-2017-12342 CVE record

Cisco Nexus Series Switches: A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches…
- Cisco Nexus Series Switches
- CWE-264
Not analysed yet 30 Nov 2017
CVE-2017-12261 CVE record

Cisco Identity Services Engine: A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that…
- Cisco Identity Services Engine
- CWE-264
Not analysed yet 2 Nov 2017
CVE-2017-12251 CVE record

A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) op…
- Cisco Cloud Services Platform 2100
- CWE-264
Not analysed yet 19 Oct 2017
CVE-2017-12268 CVE record

A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable multiple network adapters, aka a Dual-Homed Inter…
- Cisco AnyConnect Network Access Manager
- CWE-264
Not analysed yet 5 Oct 2017
CVE-2017-12266 CVE record

Cisco Meeting App: A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows…
- Cisco Meeting App
- CWE-264
Not analysed yet 5 Oct 2017
CVE-2017-12239 CVE record

Cisco IOS XE: A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Sept 2017
CVE-2017-12230 CVE record

Cisco IOS XE: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Sept 2017
CVE-2017-12226 CVE record

Cisco IOS XE: A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Sept 2017
CVE-2017-12214 CVE record

Cisco Unified Customer Voice Portal: A vulnerability in the Operations, Administration, Maintenance…
- Cisco Unified Customer Voice Portal
- CWE-264
Not analysed yet 21 Sept 2017
CVE-2017-7916 CVE record

ABB VSN300 WiFi Logger Card: A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi…
- ABB VSN300 WiFi Logger Card
- CWE-264
Not analysed yet 7 Aug 2017
CVE-2017-6713 CVE record

Cisco Elastic Services Controller: A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could…
- Cisco Elastic Services Controller
- CWE-264
Not analysed yet 6 Jul 2017
CVE-2017-6640 CVE record

A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account…
- Cisco Prime Data Center Network Manager Server Static Credential Vulnerability
- CWE-264
Not analysed yet 8 Jun 2017
CVE-2017-6638 CVE record

A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges…
- Cisco AnyConnect Local Privilege Escalation Vulnerability
- CWE-264
Not analysed yet 8 Jun 2017
CVE-2017-6637 CVE record

Cisco Prime Collaboration Provisioning: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software…
- Cisco Prime Collaboration Provisioning
- CWE-264
Not analysed yet 22 May 2017
CVE-2017-6635 CVE record

Cisco Prime Collaboration Provisioning: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software…
- Cisco Prime Collaboration Provisioning
- CWE-264
Not analysed yet 22 May 2017