CVE-2015-6362
Published Nov 10, 2015
Last updated 8 years ago
Overview
- Description
- The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:connected_grid_network_management_system:3.0\\(0.35\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "555B9959-8AC3-4BB1-B513-CE67A2478FDA"
},
{
"criteria": "cpe:2.3:a:cisco:connected_grid_network_management_system:3.0\\(0.54\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50433CA1-7937-4780-A5B4-90A1F67F7B38"
}
],
"operator": "OR"
}
]
}
]