Lucene search

CiscoCVE-2015-4224

HistoryJun 26, 2015 - 10:59 a.m.

CVE-2015-4224

2015-06-2610:59:07

CWE-78

cisco

web.nvd.nist.gov

cisco

wireless lan controller

wlc

cve-2015-4224

nvd

security vulnerability

os commands

bug id cscuj39474

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

Percentile

9.8%

JSON

Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474.

Affected configurations

Nvd

Node

ciscowireless_lan_controller_softwareMatch7.0\(240.0\)

VendorProductVersionCPE
ciscowireless_lan_controller_software7.0(240.0)cpe:2.3:o:cisco:wireless_lan_controller_software:7.0\(240.0\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	wireless_lan_controller_software	7.0(240.0)	cpe:2.3:o:cisco:wireless_lan_controller_software:7.0\(240.0\):::::::*

References

tools.cisco.com/security/center/viewAlert.x?alertId=39517

www.securityfocus.com/bid/75415

www.securitytracker.com/id/1032728

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

Percentile

9.8%

JSON

Related for CVE-2015-4224