VULNERABILITY INTELLIGENCE

CVE-2015-6385

CVSS score7.2 HIGH
EPSS probability0.44%
CISA KEVNot currently listed
Published2015-12-01
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references