CVEvulnerability
CVE-2015-4282
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-11-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.
Affected configurations
• cisco mobility services engine 5.1 base
• cisco mobility services engine 5.2 base
• cisco mobility services engine 6.0 base
• cisco mobility services engine 7.0 base
• cisco mobility services engine 7.4.100.0
• cisco mobility services engine 7.4.110.0
• cisco mobility services engine 7.4.121.0
• cisco mobility services engine 7.4 base
• cisco mobility services engine 7.5.102.101
• cisco mobility services engine 7.6.100.0
• cisco mobility services engine 7.6.120.0
• cisco mobility services engine 7.6.132.0
• cisco mobility services engine 8.0\(110.0\)
• cisco mobility services engine 8.0 base
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-privmse Vendor Advisory
- http://www.securityfocus.com/bid/77435 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034066 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-privmse Vendor Advisory
- http://www.securityfocus.com/bid/77435 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034066 Third Party Advisory, VDB Entry