Lucene search

CiscoCVE-2015-6315

HistoryOct 13, 2015 - 12:59 a.m.

CVE-2015-6315

2015-10-1300:59:00

CWE-264

cisco

web.nvd.nist.gov

cisco

aironet

access points

privilege escalation

cli commands

bug id cscuv79694

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

Cisco Aironet 1850 access points with software 8.1(112.4) allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694.

Affected configurations

Nvd

Node

ciscoaironet_access_point_softwareMatch8.1\(112.4\)

VendorProductVersionCPE
ciscoaironet_access_point_software8.1(112.4)cpe:2.3:o:cisco:aironet_access_point_software:8.1\(112.4\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	aironet_access_point_software	8.1(112.4)	cpe:2.3:o:cisco:aironet_access_point_software:8.1\(112.4\):::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151005-aironet

www.securitytracker.com/id/1033746

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2015-6315