CVE-2015-4232 in NX-OS

Riassunto

di MITRE

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 04/06/2015
• Divulgazione: 03/07/2015
• Moderazione: accettato
• Voce: VDB-76184
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 4.6 (NVD)
• EPSS: 0.00407
• KEV: no
• Attività: molto basso
• Settore: Insurance, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4232
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4232
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4232/