CVE-2015-0584

The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0584	Vendor Advisory
http://www.securityfocus.com/bid/72696
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0584	Vendor Advisory
http://www.securityfocus.com/bid/72696

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:desktop_collaboration_experience_dx650:-:*:*:*:*:*:*:*

History

21 Nov 2024, 02:23

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0584 - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0584 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/72696 -~~	() http://www.securityfocus.com/bid/72696 -

Information

Published : 2015-02-20 02:59

Updated : 2024-11-21 02:23

NVD link : CVE-2015-0584

Mitre link : CVE-2015-0584

CVE.ORG link : CVE-2015-0584

JSON object : View

Products Affected

cisco

desktop_collaboration_experience_dx650

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2015-0584", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-02-20T02:59:00.067", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0584", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/72696", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0584", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/72696", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947."}, {"lang": "es", "value": "La implementaci\u00f3n de la actualizaci\u00f3n de im\u00e1genes en los endpoints Cisco Desktop Collaboration Experience (tambi\u00e9n conocido como Collaboration Desk Experience o DX) DX650 permite a usuarios locales ejecutar comandos del sistema operativo arbitrarios a trav\u00e9s de un par\u00e1metro no especificado, tambi\u00e9n conocido como Bug ID CSCus38947."}], "lastModified": "2024-11-21T02:23:21.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:desktop_collaboration_experience_dx650:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F22D629-CA31-4D0C-9761-4B35FA3852AB"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}