RCE in Cisco Virtualization Experience Client 6000 Series Firmware
CVE-2015-4186
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience (aka VXC) Client 6215 devices with firmware 11.2(27.4) allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Virtualization_experience_client_6000_series_firmware — versions 11.2\(27.4\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)