CVE-2015-6383
Cisco IOS XE 15.4(3)S - Local Privilege Escalation via Crafted CLI Filename
Title source: llmDescription
Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/78521
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034277
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034296
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-asa
Scores
EPSS
0.0038
EPSS Percentile
30.9%
Details
CWE
CWE-264
Status
published
Products (1)
cisco/ios_xe
15.4\(3\)s
Published
Dec 03, 2015
Tracked Since
Feb 18, 2026