CVEvulnerability
CVE-2015-6383
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-12-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130.
Affected configurations
• cisco ios xe 15.4\(3\)s
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-asa Vendor Advisory
- http://www.securityfocus.com/bid/78521 www.securityfocus.com
- http://www.securitytracker.com/id/1034277 www.securitytracker.com
- http://www.securitytracker.com/id/1034296 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-asa Vendor Advisory
- http://www.securityfocus.com/bid/78521 www.securityfocus.com
- http://www.securitytracker.com/id/1034277 www.securitytracker.com
- http://www.securitytracker.com/id/1034296 www.securitytracker.com