CVE-2015-4185 in Cisco IOS
Summary
The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
06/04/2015
Disclosure
06/13/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75883 | Cisco IOS TCL Interpreter access control | 264 | Unproven | Official fix | CVE-2015-4185 |