CVE:CVE-2019-1839
CNNVD:CNNVD-201908-1659
Cisco Remote PHY Device Software中存在输入验证错误漏洞，该漏洞源于程序没有正确处理过滤用户提交的输入。本地攻击者可利用该漏洞以root用户身份运行任意命令。以下产品及版本受到影响：Cisco Remote PHY 120 6.4之前版本，Remote PHY 220 3.1之前版本，Remote PHY Shelf 7200 1.2之前版本。
solution:Upgrade cisco remote_phy_120_firmware to a higher version than 6.4,and avoid the version (,6.4); Upgrade cisco remote_phy_220_firmware to a higher version than 3.1,and avoid the version (,3.1); Upgrade cisco remote_phy_shelf_7200_firmware to a higher version than 1.2,and avoid the version (,1.2); Upgrade cisco cbr-8_firmware to a higher version than 1.1,6.1,6.2,and avoid the version 1.1,6.1,6.2