CVE:CVE-2011-2547
CNNVD:CNNVD-201107-320
Cisco SA 500系列安全应用程序的Web管理界面中存在命令注入漏洞。远程认证用户可利用此漏洞以root权限在下层操作系统中执行任意命令，通过几个Web表单提供恶意参数，攻击者可获取root权限。
solution:Upgrade cisco sa500_software to a higher version than 2.1.18,1.0.14,1.0.15,1.0.17,1.0.39,1.1.21,1.1.42,1.1.65,and avoid the version (,2.1.18],1.0.14,1.0.15,1.0.17,1.0.39,1.1.21,1.1.42,1.1.65; Upgrade cisco sa520 to a higher version than *; Upgrade cisco sa520w to a higher version than *; Upgrade cisco sa540 to a higher version than *