CVE-2015-4282

Опубликовано: 06 нояб. 2015

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-privmse
Vendor Advisory
http://www.securityfocus.com/bid/77435
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034066
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-privmse
Vendor Advisory
http://www.securityfocus.com/bid/77435
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034066
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:mobility_services_engine:5.1_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:5.2_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:6.0_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.0_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.4.100.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.4.110.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.4.121.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.4_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.5.102.101:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.6.100.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.6.120.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:7.6.132.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:8.0\(110.0\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:mobility_services_engine:8.0_base:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00278

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-v76g-4r7v-g6m6

github

больше 3 лет назад