CVE-2015-0611
Published Feb 12, 2015
Last updated 7 years ago
Overview
- Description
- The administrative web-management portal in Cisco IX 8 (.0.1) and earlier on Cisco TelePresence IX5000 devices does not properly restrict the device-recovery account's access, which allows remote authenticated users to obtain HelpDesk-equivalent privileges by leveraging device-recovery authentication, aka Bug ID CSCus74174.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 6.4
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:telepresence_system_software_ix:8.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D04D3349-47F1-48D4-8A76-FBD962208384"
},
{
"criteria": "cpe:2.3:o:cisco:telepresence_system_software_ix:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54BA1F2A-E914-4F20-BD44-294912566873"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:telepresence_ix5000:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "65F8BD79-5FAB-4CBF-A698-69067403D6DA"
},
{
"criteria": "cpe:2.3:h:cisco:telepresence_ix5200:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8A36732D-4A16-438B-9D3D-2ADE3B0DA4D4"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]