CVE-2015-6362
Cisco Connected Grid NMS 3.0(0.35/0.54) Authenticated Config Modification via Role Bypass
Title source: llmDescription
The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151109-cg-nms
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034106
Scores
EPSS
0.0138
EPSS Percentile
69.3%
Details
CWE
CWE-264
Status
published
Products (2)
cisco/connected_grid_network_management_system
3.0\(0.35\)
cisco/connected_grid_network_management_system
3.0\(0.54\)
Published
Nov 10, 2015
Tracked Since
Feb 18, 2026