References https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-iosxe-cmdinj-2MzhjM6K.html https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20190327-xecmd.html https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-cmd-inject-rPJM8BGL https://www.tenablecloud.cn/plugins/nessus/128051 https://vulners.com/cnnvd/CNNVD-202505-1168 https://www.iotsec-zone.com/article/428 https://baike.baidu.com/item/Cisco%20IOS%20XE%20Software%20%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/57330194 https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-webui-cmdinj-gVn3OKNC.html https://nvd.nist.gov/vuln/detail/CVE-2025-20334 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webcmdinjsh-UFJxTgZD
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)Cisco Asyncos 整数溢出漏洞 可导致远程代码执行PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞