CVE-2017-12352 Command injection in Cisco Application Policy Infrastructure Controller
Authenticated local attackers can execute arbitrary commands with root privileges on Cisco APIC due to insufficient input validation in boot scripts.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-12352?
CVE-2017-12352 is a medium-severity command injection vulnerability in Cisco Application Policy Infrastructure Controller, published on 30 Nov 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system. The vulnerability is due to insufficient validation of user-controlled input that is supplied to certain script files of an affected system. An attacker could exploit this vulnerability by submitting crafted input to a script file on an affected system. A successful exploit could allow the attacker to gain elevated privileges and execute arbitrary commands with root privileges on the affected system. To exploit this vulnerability, the attacker would need to authenticate to the affected system by using valid administrator credentials. Cisco Bug IDs: CSCvf57274.
Weakness: CWE-77
Which versions are affected by CVE-2017-12352?
It affects 1 product.
Products include Cisco Application Policy Infrastructure Controller.
How do I fix CVE-2017-12352?
No fix has been published for CVE-2017-12352 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2017-12352 being exploited?
There is no known exploitation of CVE-2017-12352 in the wild and no public exploit code.
Other vulnerabilities in Cisco Application Policy Infrastructure Controller
- CVE-2021-1393 Cisco Application Services Engine Unauthorized Access Vulnerabilities
- CVE-2021-1396 Cisco Application Services Engine Unauthorized Access Vulnerabilities
- CVE-2021-1577 Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability
- CVE-2023-20011 Cross-site request forgery in Cisco Application Policy Infrastructure Controller (APIC)
- CVE-2021-1578 Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability
Sources
Also known as GHSA-vjpq-xwhg-4jr4.