VULNERABILITY INTELLIGENCE
CVE-2015-6426
CVSS score7.2 HIGH
EPSS probability0.37%
CISA KEVNot currently listed
Published2015-12-18
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CSCus99427.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108