CVE:CVE-2011-3310
CNNVD:CNNVD-201110-516
CiscoWorks Common Services是CiscoWorks应用所共享的通用管理服务集。
CiscoWorks Common Services在实现上存在代码注入漏洞。远程攻击者可利用此漏洞在下层操作系统上以系统级别的权限执行任意命令。
此漏洞源于CiscoWorks Home Page组件中的错误输入验证。
受到影响的应用包括：
CiscoWorks LAN Management Solution
Security Manager
Unified Operations Manager
Unified Service Monitor
CiscoWorks QoS Policy Manager
CiscoWorks Voice Manager
solution:Upgrade cisco ciscoworks_common_services to a higher version than 4.0.1,2.2,3.0.5,3.0.6,3.1,3.1.1,3.2,3.3,and avoid the version (,4.0.1],2.2,3.0.5,3.0.6,3.1,3.1.1,3.2,3.3; Upgrade microsoft windows to a higher version than *