Cisco TelePresence Video Communication Server X8.5.2 CLI privilege escalation : 8/20/2015 6:08:43 AM
 | This eBook shows you how to build great push messages that convert for your app. From our sponsors  |
| Vulnerability Advisories |
| Vulnerabilities of scip VulDB |
Cisco TelePresence Video Communication Server X8.5.2 CLI privilege escalation
8/19/2015 7:00:00 PM
General
scipID: 77341
Affected: Cisco TelePresence Video Communication Server X8.5.2
Published: 08/20/2015
Risk: problematic
Created: 08/20/2015
Entry: 66.3% complete
Summary
A vulnerability has been found in Cisco TelePresence Video Communication Server X8.5.2 and classified as problematic. Affected by this vulnerability is an unknown function of the component CLI. The manipulation with an unknown input leads to a privilege escalation vulnerability. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:
The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing script arguments to an unspecified file, aka Bug ID CSCuv12542.
The weakness was released 08/20/2015 as CSCuv12542 as advisory (Website). This vulnerability is known as CVE-2015-4327. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
CVSS
Base Score: 4.1 (CVSS2#AV:L/AC:M/Au:S/C:P/I:P/A:P) [?]
Temp Score: 4.1 (CVSS2#E:ND/RL:ND/RC:ND) [?]
CPE
Exploiting
Class: Privilege escalation
Local: Yes
Remote: No
Availability: No
Countermeasures
Recommended: no mitigation known
0-Day Time: 0 days since found
Timeline
08/20/2015 | Advisory disclosed
08/20/2015 | VulDB entry created
08/20/2015 | VulDB entry updated
Sources
Advisory: CSCuv12542
CVE: CVE-2015-4327 (mitre.org) (nvd.nist.org) (cvedetails.com)
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions
