Lucene search
HistorySep 02, 2015 - 4:59 p.m.
CVE-2015-4330
cisco
telepresence
video communication server
vcs
expressway
bug id
cscuv10556
cve-2015-4330
security vulnerability
os command execution
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.2%
A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556.
Affected configurations
Node
ciscotelepresence_video_communication_server_softwareMatchx8.5.2expressway
Related
cvelist
cvelist
CVE-2015-4330
2015-09-02 16:00:00
cisco
cisco
prion
prion
Command injection
2015-09-02 16:59:00
nvd
nvd
CVE-2015-4330
2015-09-02 16:59:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2015-4330