CVE-2015-0768

Cisco Prime Network Control System Authenticated Command Execution

Title source: llm
STIX 2.1

Description

The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39192
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032541

Scores

EPSS 0.0209
EPSS Percentile 79.6%

Details

CWE
CWE-264
Status published
Products (3)
cisco/prime_network_control_system 2.1\(0.0.85\)
cisco/prime_network_control_system 2.2\(0.0.58\)
cisco/prime_network_control_system 2.2\(0.0.69\)
Published Jun 12, 2015
Tracked Since Feb 18, 2026