Vulnerability in Cisco Telepresence Server Software

CVE-2015-0660

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.

EPSS: 0.004 (28.1th percentile) — read the EPSS interpretation.

Affected products

Cisco Telepresence_server_software
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)