Improper input validation in Cisco Desktop Collaboration Experience Dx650

CVE-2015-0584

The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Desktop_collaboration_experience_dx650
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)