Lucene search

CiscoCVE-2017-6732

HistoryJul 10, 2017 - 8:29 p.m.

CVE-2017-6732

2017-07-1020:29:00

CWE-269

cisco

web.nvd.nist.gov

cve-2017-6732

cisco

prime

network software

installation

vulnerability

privilege escalation

cscvd47343

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attacker to elevate their privileges to root privileges. More Information: CSCvd47343. Known Affected Releases: 4.2(2.1)PP1 4.2(3.0)PP6 4.3(0.0)PP4 4.3(1.0)PP2. Known Fixed Releases: 4.3(2).

Affected configurations

Nvd

Node

ciscoprime_networkMatch4.2\(2.1\)pp1

ciscoprime_networkMatch4.2\(3.0\)pp6

ciscoprime_networkMatch4.3\(0.0\)pp4

ciscoprime_networkMatch4.3\(1.0\)pp2

VendorProductVersionCPE
ciscoprime_network4.2(2.1)pp1cpe:2.3:a:cisco:prime_network:4.2\(2.1\)pp1:*:*:*:*:*:*:*
ciscoprime_network4.2(3.0)pp6cpe:2.3:a:cisco:prime_network:4.2\(3.0\)pp6:*:*:*:*:*:*:*
ciscoprime_network4.3(0.0)pp4cpe:2.3:a:cisco:prime_network:4.3\(0.0\)pp4:*:*:*:*:*:*:*
ciscoprime_network4.3(1.0)pp2cpe:2.3:a:cisco:prime_network:4.3\(1.0\)pp2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	prime_network	4.2(2.1)pp1	cpe:2.3:a:cisco:prime_network:4.2\(2.1\)pp1:::::::*
cisco	prime_network	4.2(3.0)pp6	cpe:2.3:a:cisco:prime_network:4.2\(3.0\)pp6:::::::*
cisco	prime_network	4.3(0.0)pp4	cpe:2.3:a:cisco:prime_network:4.3\(0.0\)pp4:::::::*
cisco	prime_network	4.3(1.0)pp2	cpe:2.3:a:cisco:prime_network:4.3\(1.0\)pp2:::::::*

CNA Affected

[
  {
    "product": "Cisco Prime Network",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Prime Network"
      }
    ]
  }
]

References

www.securityfocus.com/bid/99457

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-prime

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2017-6732