CVE-2015-0660

2015-03-1401:00:00

cisco

www.cve.org

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0660

www.securitytracker.com/id/1031924