A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Application_policy_infrastructure_controller | Cisco | 3.2(1l) (including) | 3.2(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(1m) (including) | 3.2(1m) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(2l) (including) | 3.2(2l) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(2o) (including) | 3.2(2o) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3i) (including) | 3.2(3i) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3j) (including) | 3.2(3j) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3n) (including) | 3.2(3n) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3o) (including) | 3.2(3o) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3r) (including) | 3.2(3r) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3s) (including) | 3.2(3s) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(4d) (including) | 3.2(4d) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(4e) (including) | 3.2(4e) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(5d) (including) | 3.2(5d) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(5e) (including) | 3.2(5e) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(5f) (including) | 3.2(5f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(6i) (including) | 3.2(6i) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(7f) (including) | 3.2(7f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(7k) (including) | 3.2(7k) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(8d) (including) | 3.2(8d) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(9b) (including) | 3.2(9b) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(9f) (including) | 3.2(9f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(9h) (including) | 3.2(9h) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(10e) (including) | 3.2(10e) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(10f) (including) | 3.2(10f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(10g) (including) | 3.2(10g) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(41d) (including) | 3.2(41d) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(1h) (including) | 4.0(1h) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(2c) (including) | 4.0(2c) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(3c) (including) | 4.0(3c) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(3d) (including) | 4.0(3d) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1a) (including) | 4.1(1a) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1i) (including) | 4.1(1i) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1j) (including) | 4.1(1j) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1k) (including) | 4.1(1k) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1l) (including) | 4.1(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2g) (including) | 4.1(2g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2m) (including) | 4.1(2m) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2o) (including) | 4.1(2o) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2s) (including) | 4.1(2s) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2u) (including) | 4.1(2u) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2w) (including) | 4.1(2w) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2x) (including) | 4.1(2x) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1g) (including) | 4.2(1g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1i) (including) | 4.2(1i) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1j) (including) | 4.2(1j) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1l) (including) | 4.2(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(2e) (including) | 4.2(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(2f) (including) | 4.2(2f) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(2g) (including) | 4.2(2g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3j) (including) | 4.2(3j) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3l) (including) | 4.2(3l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3n) (including) | 4.2(3n) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3q) (including) | 4.2(3q) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4i) (including) | 4.2(4i) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4k) (including) | 4.2(4k) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4o) (including) | 4.2(4o) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4p) (including) | 4.2(4p) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(5k) (including) | 4.2(5k) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(5l) (including) | 4.2(5l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(5n) (including) | 4.2(5n) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6d) (including) | 4.2(6d) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6g) (including) | 4.2(6g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6h) (including) | 4.2(6h) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6l) (including) | 4.2(6l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6o) (including) | 4.2(6o) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7f) (including) | 4.2(7f) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7l) (including) | 4.2(7l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7q) (including) | 4.2(7q) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7r) (including) | 4.2(7r) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7s) (including) | 4.2(7s) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7t) (including) | 4.2(7t) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7u) (including) | 4.2(7u) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7v) (including) | 4.2(7v) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7w) (including) | 4.2(7w) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(1k) (including) | 5.0(1k) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(1l) (including) | 5.0(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(2e) (including) | 5.0(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(2h) (including) | 5.0(2h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(1h) (including) | 5.1(1h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(2e) (including) | 5.1(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(3e) (including) | 5.1(3e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(4c) (including) | 5.1(4c) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(1g) (including) | 5.2(1g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2e) (including) | 5.2(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2f) (including) | 5.2(2f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2g) (including) | 5.2(2g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2h) (including) | 5.2(2h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(3e) (including) | 5.2(3e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(3f) (including) | 5.2(3f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(3g) (including) | 5.2(3g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4d) (including) | 5.2(4d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4e) (including) | 5.2(4e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4f) (including) | 5.2(4f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4h) (including) | 5.2(4h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(5c) (including) | 5.2(5c) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(5d) (including) | 5.2(5d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(5e) (including) | 5.2(5e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(6e) (including) | 5.2(6e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(6g) (including) | 5.2(6g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(6h) (including) | 5.2(6h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(7f) (including) | 5.2(7f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(7g) (including) | 5.2(7g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8d) (including) | 5.2(8d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8e) (including) | 5.2(8e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8f) (including) | 5.2(8f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8g) (including) | 5.2(8g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8h) (including) | 5.2(8h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8i) (including) | 5.2(8i) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(1d) (including) | 5.3(1d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2a) (including) | 5.3(2a) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2b) (including) | 5.3(2b) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2c) (including) | 5.3(2c) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2d) (including) | 5.3(2d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2e) (including) | 5.3(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(1g) (including) | 6.0(1g) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(1j) (including) | 6.0(1j) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(2h) (including) | 6.0(2h) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(2j) (including) | 6.0(2j) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(3d) (including) | 6.0(3d) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(3e) (including) | 6.0(3e) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(3g) (including) | 6.0(3g) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(4c) (including) | 6.0(4c) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(5h) (including) | 6.0(5h) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(5j) (including) | 6.0(5j) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(6c) (including) | 6.0(6c) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(7e) (including) | 6.0(7e) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(8d) (including) | 6.0(8d) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.1(1f) (including) | 6.1(1f) (including) |
Command injection vulnerabilities typically occur when:
Many protocols and products have their own custom command language. While OS or shell command strings are frequently discovered and targeted, developers may not realize that these other command languages might also be vulnerable to attacks. Command injection is a common problem with wrapper programs.