CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: the admin web interface in cisco asyncos 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-ld, and 8.8.x before 8.8.0-085 on web security appliance (wsa) devices allows remote authenticated users to obtain root privileges via crafted certificate-generation arguments, aka bug id cscus83445.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-11-06
Last Modified Date: 2016-12-07
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection').
user
CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: the admin web interface in cisco asyncos 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-ld, and 8.8.x before 8.8.0-085 on web security appliance (wsa) devices allows remote authenticated users to obtain root privileges via crafted certificate-generation arguments, aka bug id cscus83445.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-11-06
Last Modified Date: 2016-12-07
assistant