CVE-2015-0660
Cisco Virtual TelePresence Server Software - Unauthenticated OS Command Execution via Serial Port
Title source: llmDescription
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031924
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0660
Scores
EPSS
0.0035
EPSS Percentile
27.2%
Details
CWE
CWE-284
Status
published
Products (1)
cisco/telepresence_server_software
Published
Mar 14, 2015
Tracked Since
Feb 18, 2026