Vulnerability in Cisco iOS

CVE-2015-4185

The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202.

EPSS: 0.004 (35.7th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 15.2\(4\)m6, 15.2m
  • N/a — versions n/a

Weakness classification (CWE)

References

  • psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
  • psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)