CVE-2015-4234 : Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root

Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127.

Published 2015-07-03 10:59:02

Updated 2016-12-28 17:07:38

Source Cisco Systems, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2015-4234

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-4234

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2015-4234

http://tools.cisco.com/security/center/viewAlert.x?alertId=39571

Cisco Nexus Devices Python Subsystem Local Privilege Escalation Vulnerabilities
Vendor Advisory
http://www.securitytracker.com/id/1032765

Cisco NX-OS Python Scripting Engine Flaws Lets Local Users Gain Root Privileges - SecurityTracker
Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/75502

Multiple Cisco Products CVE-2015-4234 Multiple Local Privilege Escalation Vulnerabilities
Third Party Advisory;VDB Entry

Products affected by CVE-2015-4234

Cisco » Nx-os » Version: 6.0(2)
cpe:2.3:o:cisco:nx-os:6.0\(2\):*:*:*:*:*:*:*
Matching versions
Cisco » Nx-os » Version: 6.2(2)
cpe:2.3:o:cisco:nx-os:6.2\(2\):*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2015-4234

Exploit prediction scoring system (EPSS) score for CVE-2015-4234

CVSS scores for CVE-2015-4234

CWE ids for CVE-2015-4234

References for CVE-2015-4234

Products affected by CVE-2015-4234