CVE-2015-0767

2015-06-0718:59:04

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified commands, aka Bug ID CSCur18132.

Affected configurations

Nvd

Node

ciscoedge_340_firmwareMatch1.0.0

ciscoedge_340_firmwareMatch1.1.0

AND

ciscoedge_340

VendorProductVersionCPE
ciscoedge_340_firmware1.0.0cpe:2.3:o:cisco:edge_340_firmware:1.0.0:*:*:*:*:*:*:*
ciscoedge_340_firmware1.1.0cpe:2.3:o:cisco:edge_340_firmware:1.1.0:*:*:*:*:*:*:*
ciscoedge_340*cpe:2.3:h:cisco:edge_340:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	edge_340_firmware	1.0.0	cpe:2.3:o:cisco:edge_340_firmware:1.0.0:::::::*
cisco	edge_340_firmware	1.1.0	cpe:2.3:o:cisco:edge_340_firmware:1.1.0:::::::*
cisco	edge_340	*	cpe:2.3:h:cisco:edge_340::::::::