Lucene search
HistoryJun 13, 2015 - 2:59 p.m.
CVE-2015-2955
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Affected configurations
Node
igreksmilkystep_lightRange≤0.94
ORigreksmilkystep_professionalRange≤1.82
ORigreksmilkystep_professional_oemRange≤1.82
Related
jvn
jvn
JVN#05559185: MilkyStep vulnerable to OS command injection
2015-06-09 00:00:00
prion
prion
Design/Logic Flaw
2015-06-13 14:59:00
cvelist
cvelist
CVE-2015-2955
2015-06-13 14:00:00
cve
cve
CVE-2015-2955
2015-06-13 14:59:06
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%
Related for NVD:CVE-2015-2955