Vulnerability in Cisco Connected_grid_network_management_system

CVE-2015-6362

The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka B…

EPSS: 0.014 (69.1th percentile) — read the EPSS interpretation.

Affected products

Cisco Connected_grid_network_management_system — versions 3.0\(0.35\), 3.0\(0.54\)
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)