NVD

Id
27320  
Name
CVE-2015-6385  
Description
The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-12-01  
Modified Date
2015-12-01  
Seq
2015-6385  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143853 27320 CVE-2015-6385 20151130 Cisco Cloud Services Router 1000V Command Injection Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10736 JVNDB-2015-006056 Cisco Cloud Services Router 1000V 上で稼動する Cisco IOS における root 権限で任意のコマンドを実行される脆弱性 Cisco Cloud Services Router 1000V 上で稼動する Cisco IOS の publish-event および event-manager 機能には、root 権限で任意のコマンドを実行される脆弱性が存在します。 CVE-2015-6385 83610 CVE-2015-6385 27320 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006056.html 2015-11-30 2015-12-02 View