Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ios_xe | Cisco | 16.9.4 (including) | 16.9.4 (including) |
Ios_xe | Cisco | 17.2.1 (including) | 17.2.1 (including) |
Ios_xe | Cisco | 17.3 (including) | 17.3 (including) |
Ios_xe | Cisco | 17.4.1 (including) | 17.4.1 (including) |