Unscored severity · published Apr 21, 2006
CVE-2006-1961
Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the "show" command in the application's command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE). NOTE: other issues might be addressed by the Cisco advisory.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C2
Ciscoworks 2000 Service Management Solution · Cisco
All versions, or not specified · source: NVD
ES
Ethernet Subscriber Solution Engine · Cisco
All versions, or not specified · source: NVD
HS
Hosting Solution Engine · Cisco
1.7; 1.7.0; 1.7.1; 1.7.2; 1.7.3 · source: NVD
UR
User Registration Tool · Cisco
All versions, or not specified · source: NVD
WL
Wireless Lan Solution Engine · Cisco
2.0; 2.0; 2.1; 2.1; 2.2; 2.2; +22 more · source: NVD
Affected product
C2
Ciscoworks 2000 Service Management Solution
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1961
Patch
http://secunia.com/advisories/19736
secunia.com
http://secunia.com/advisories/19739
secunia.com
http://secunia.com/advisories/19741
Patch
http://securitytracker.com/id?1015965
www.assurance.com.au
http://www.assurance.com.au/advisories/200604-cisco.txt
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml