CVE-2015-4282

2015-11-0611:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cisco

mse

8.0.120.7

weak permissions

vulnerability

cve-2015-4282

nvd

6.5 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.

CPENameOperatorVersion
cisco:mobility_services_enginecisco mobility services engineeq7.6.132.0
cisco:mobility_services_enginecisco mobility services engineeq7.4.121.0
cisco:mobility_services_enginecisco mobility services engineeq6.0_base
cisco:mobility_services_enginecisco mobility services engineeq8.0_base
cisco:mobility_services_enginecisco mobility services engineeq5.1_base
cisco:mobility_services_enginecisco mobility services engineeq7.4.110.0
cisco:mobility_services_enginecisco mobility services engineeq7.5.102.101
cisco:mobility_services_enginecisco mobility services engineeq7.6.120.0
cisco:mobility_services_enginecisco mobility services engineeq5.2_base
cisco:mobility_services_enginecisco mobility services engineeq7.0_base

CPE	Name	Operator	Version
cisco:mobility_services_engine	cisco mobility services engine	eq	7.6.132.0
cisco:mobility_services_engine	cisco mobility services engine	eq	7.4.121.0
cisco:mobility_services_engine	cisco mobility services engine	eq	6.0_base
cisco:mobility_services_engine	cisco mobility services engine	eq	8.0_base
cisco:mobility_services_engine	cisco mobility services engine	eq	5.1_base
cisco:mobility_services_engine	cisco mobility services engine	eq	7.4.110.0
cisco:mobility_services_engine	cisco mobility services engine	eq	7.5.102.101
cisco:mobility_services_engine	cisco mobility services engine	eq	7.6.120.0
cisco:mobility_services_engine	cisco mobility services engine	eq	5.2_base
cisco:mobility_services_engine	cisco mobility services engine	eq	7.0_base