Lucene search

K
nvd[email protected]NVD:CVE-2015-0660
HistoryMar 14, 2015 - 1:59 a.m.

CVE-2015-0660

2015-03-1401:59:09
CWE-284
web.nvd.nist.gov
4

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0

Percentile

5.1%

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.

Affected configurations

Nvd
Node
ciscotelepresence_server_software
VendorProductVersionCPE
ciscotelepresence_server_software*cpe:2.3:a:cisco:telepresence_server_software:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2015-0660