CVE-2015-4231

Cisco NX-OS 6.2(8a) - Authenticated Arbitrary VDC File Deletion via Python Interpreter

Title source: llm
STIX 2.1

Description

The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032763
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39568

Scores

EPSS 0.0038
EPSS Percentile 30.4%

Details

CWE
CWE-264
Status published
Products (1)
cisco/nx-os 6.2\(8a\)
Published Jul 03, 2015
Tracked Since Feb 18, 2026