Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability

A vulnerability exists in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance, allowing authenticated, remote attackers to execute commands on the underlying operating system as the root user. This issue arises from inadequate validation of user-supplied input. An attacker with valid administrative credentials could exploit this vulnerability by uploading a crafted certificate to the affected device, leading to arbitrary code execution as the root user.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the affected system, with the executed commands running as the root user.

Remediation

Users are advised to upgrade to Cisco ThousandEyes Virtual Appliance version 0.262.0 or later. For instructions on obtaining the update, contact the Cisco Technical Assistance Center (TAC) or visit the Cisco Support and Downloads page.