Design/Logic Flaw

2015-03-1401:59:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0660

www.securitytracker.com/id/1031924