CVEvulnerability
CVE-2015-0660
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-284
Description
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.
Affected configurations
• cisco telepresence server software
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0660 Vendor Advisory
- http://www.securitytracker.com/id/1031924 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0660 Vendor Advisory
- http://www.securitytracker.com/id/1031924 www.securitytracker.com