CVE-2015-4234 in MDS 9000

Riassunto

di MITRE

Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 04/06/2015
• Divulgazione: 03/07/2015
• Moderazione: accettato
• Voce: VDB-76240
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 7.2 (NVD)
• EPSS: 0.00417
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4234
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4234
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4234/