CVEvulnerability
CVE-2015-4327
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-08-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing script arguments to an unspecified file, aka Bug ID CSCuv12542.
Affected configurations
• cisco telepresence video communication server software x8.5.2
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=40518 Vendor Advisory
- http://www.securityfocus.com/bid/76408 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033332 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=40518 Vendor Advisory
- http://www.securityfocus.com/bid/76408 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033332 Third Party Advisory, VDB Entry