Lucene search

K
cveCiscoCVE-2015-0767
HistoryJun 07, 2015 - 6:59 p.m.

CVE-2015-0767

2015-06-0718:59:04
CWE-264
cisco
web.nvd.nist.gov
23
cve-2015-0767
cisco
edge 300 software
local users
root privileges
bug id cscur18132
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

5.1%

Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified commands, aka Bug ID CSCur18132.

Affected configurations

Nvd
Node
ciscoedge_340_firmwareMatch1.0.0
OR
ciscoedge_340_firmwareMatch1.1.0
AND
ciscoedge_340
VendorProductVersionCPE
ciscoedge_340_firmware1.0.0cpe:2.3:o:cisco:edge_340_firmware:1.0.0:*:*:*:*:*:*:*
ciscoedge_340_firmware1.1.0cpe:2.3:o:cisco:edge_340_firmware:1.1.0:*:*:*:*:*:*:*
ciscoedge_340*cpe:2.3:h:cisco:edge_340:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

5.1%

Related for CVE-2015-0767