Lucene search

K
cveCiscoCVE-2015-4234
HistoryJul 03, 2015 - 10:59 a.m.

CVE-2015-4234

2015-07-0310:59:02
CWE-264
cisco
web.nvd.nist.gov
24
cve-2015-4234
cisco
nx-os
nexus
os configuration
root access
python interpreter
bug ids
cscun02887
cscur00115
cscur00127
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127.

Affected configurations

Nvd
Node
cisconx-osMatch6.0\(2\)
OR
cisconx-osMatch6.2\(2\)
VendorProductVersionCPE
cisconx-os6.0(2)cpe:2.3:o:cisco:nx-os:6.0\(2\):*:*:*:*:*:*:*
cisconx-os6.2(2)cpe:2.3:o:cisco:nx-os:6.2\(2\):*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

Related for CVE-2015-4234