Lucene search
HistoryMar 14, 2015 - 1:59 a.m.
CVE-2015-0660
cisco
telepresence
server
software
local users
arbitrary commands
root access
serial port
security vulnerability
7.4 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:telepresence_server_software | cisco telepresence server software | eq | * |
Related
prion
prion
Design/Logic Flaw
2015-03-14 01:59:00
cisco
cisco
cvelist
cvelist
CVE-2015-0660
2015-03-14 01:00:00
kaspersky
kaspersky
KLA10504 Multiple vulnerabilities in Cisco products
2015-03-19 00:00:00
7.4 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2015-0660