Cisco Crosswork Planning is susceptible to unauthorized file system manipulation, which could lead to critical system impact and service disruption.

This vulnerability is classified as external control of file name or path (CWE-73). It allows an unauthenticated remote attacker to influence file system operations, potentially resulting in unauthorized file modification or deletion.

With a CVSS score of 10.0, this vulnerability presents a critical threat to system integrity and availability. An attacker could potentially overwrite configuration files or execute arbitrary code through file system manipulation, leading to a complete compromise of the application environment.

Immediate Action: Upgrade to the latest version of Cisco Crosswork Planning as recommended by the vendor.

Proactive Monitoring: Monitor file system integrity and review logs for suspicious file access patterns or unauthorized path traversal attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to block requests containing path traversal characters or suspicious file path patterns.

Public Exploit Available: Unknown

This vulnerability demands immediate attention due to its potential for total system compromise. Administrators should apply the vendor-provided security patches as soon as they become available to prevent exploitation.