var-201511-0346
Vulnerability from variot
Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504. Vendors have confirmed this vulnerability Bug ID CSCuv40504 It is released as.By being written to a file by a local user, root You may get permission. The Cisco Mobility Services Engine (MSE) is a suite of Wi-Fi-enabled platforms (mobile service engines) from Cisco. The platform collects, stores, and manages data from wireless clients, Cisco access points, and controllers. A security vulnerability exists in Cisco MSE 8.0.120.7 and earlier. Because the program assigns weak permissions to the binary. This issue is being tracked by Cisco Bug ID CSCuv40504
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201511-0346", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.4.121.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.4.110.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.4_base" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "8.0\\(110.0\\)" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "8.0_base" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.4.100.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.6.100.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.6.120.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.6.132.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "7.5.102.101" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "5.2_base" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "5.1_base" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "7.0_base" }, { "model": "mobility services engine", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "6.0_base" }, { "model": "mobility services engine", "scope": "lte", "trust": 0.8, "vendor": "cisco", "version": "8.0.120.7" }, { "model": "mobility services engine", "scope": "lte", "trust": 0.6, "vendor": "cisco", "version": "\u003c=8.0.120.7" }, { "model": "mobility services engine", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "8.0.120.7" }, { "model": "mobility services engine", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "8.0.120.1" }, { "model": "mobility services engine", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "8.0(110.0)" }, { "model": "mobility services engine", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "7.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "10.2.0" }, { "model": "mobility services engine", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "10.0" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "BID", "id": "77435" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "NVD", "id": "CVE-2015-4282" }, { "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:5.1_base:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:8.0\\(110.0\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.4.100.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.4.110.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.4.121.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.5.102.101:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:6.0_base:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.4_base:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.6.100.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.6.132.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:5.2_base:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.0_base:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:7.6.120.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:mobility_services_engine:8.0_base:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2015-4282" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Jeremy Brown", "sources": [ { "db": "BID", "id": "77435" } ], "trust": 0.3 }, "cve": "CVE-2015-4282", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.4, "impactScore": 10.0, "integrityImpact": "COMPLETE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Medium", "accessVector": "Local", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 6.9, "confidentialityImpact": "Complete", "exploitabilityScore": null, "id": "CVE-2015-4282", "impactScore": null, "integrityImpact": "Complete", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "Medium", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.4, "id": "CNVD-2015-07472", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.4, "id": "VHN-82243", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:L/AC:M/AU:N/C:C/I:C/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "NVD", "id": "CVE-2015-4282", "trust": 1.8, "value": "MEDIUM" }, { "author": "CNVD", "id": "CNVD-2015-07472", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201511-103", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-82243", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "VULHUB", "id": "VHN-82243" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "NVD", "id": "CVE-2015-4282" }, { "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504. Vendors have confirmed this vulnerability Bug ID CSCuv40504 It is released as.By being written to a file by a local user, root You may get permission. The Cisco Mobility Services Engine (MSE) is a suite of Wi-Fi-enabled platforms (mobile service engines) from Cisco. The platform collects, stores, and manages data from wireless clients, Cisco access points, and controllers. A security vulnerability exists in Cisco MSE 8.0.120.7 and earlier. Because the program assigns weak permissions to the binary. \nThis issue is being tracked by Cisco Bug ID CSCuv40504", "sources": [ { "db": "NVD", "id": "CVE-2015-4282" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "BID", "id": "77435" }, { "db": "VULHUB", "id": "VHN-82243" } ], "trust": 2.52 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2015-4282", "trust": 3.4 }, { "db": "BID", "id": "77435", "trust": 1.4 }, { "db": "SECTRACK", "id": "1034066", "trust": 1.1 }, { "db": "JVNDB", "id": "JVNDB-2015-005764", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2015-07472", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-201511-103", "trust": 0.6 }, { "db": "SEEBUG", "id": "SSVID-89767", "trust": 0.1 }, { "db": "VULHUB", "id": "VHN-82243", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "VULHUB", "id": "VHN-82243" }, { "db": "BID", "id": "77435" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "NVD", "id": "CVE-2015-4282" }, { "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "id": "VAR-201511-0346", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "VULHUB", "id": "VHN-82243" } ], "trust": 0.06999999999999999 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2015-07472" } ] }, "last_update_date": "2023-12-18T14:05:59.200000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "cisco-sa-20151104-privmse", "trust": 0.8, "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20151104-privmse" }, { "title": "Patch for Cisco Mobility Services Engine Privilege Escalation Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/66502" }, { "title": "Cisco Mobility Services Engine Fixes for permission permissions and access control vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=58599" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-264", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-82243" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "NVD", "id": "CVE-2015-4282" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.6, "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20151104-privmse" }, { "trust": 1.1, "url": "http://www.securityfocus.com/bid/77435" }, { "trust": 1.1, "url": "http://www.securitytracker.com/id/1034066" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4282" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-4282" }, { "trust": 0.3, "url": "http://www.cisco.com/" }, { "trust": 0.3, "url": "https://blogs.securiteam.com/index.php/archives/2928" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "VULHUB", "id": "VHN-82243" }, { "db": "BID", "id": "77435" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "NVD", "id": "CVE-2015-4282" }, { "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2015-07472" }, { "db": "VULHUB", "id": "VHN-82243" }, { "db": "BID", "id": "77435" }, { "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "db": "NVD", "id": "CVE-2015-4282" }, { "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2015-11-12T00:00:00", "db": "CNVD", "id": "CNVD-2015-07472" }, { "date": "2015-11-06T00:00:00", "db": "VULHUB", "id": "VHN-82243" }, { "date": "2015-11-04T00:00:00", "db": "BID", "id": "77435" }, { "date": "2015-11-09T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "date": "2015-11-06T11:59:00.120000", "db": "NVD", "id": "CVE-2015-4282" }, { "date": "2015-11-09T00:00:00", "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2015-11-12T00:00:00", "db": "CNVD", "id": "CNVD-2015-07472" }, { "date": "2017-01-06T00:00:00", "db": "VULHUB", "id": "VHN-82243" }, { "date": "2017-01-12T04:10:00", "db": "BID", "id": "77435" }, { "date": "2015-11-09T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-005764" }, { "date": "2017-01-06T16:55:48.363000", "db": "NVD", "id": "CVE-2015-4282" }, { "date": "2015-11-09T00:00:00", "db": "CNNVD", "id": "CNNVD-201511-103" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "BID", "id": "77435" }, { "db": "CNNVD", "id": "CNNVD-201511-103" } ], "trust": 0.9 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco Mobility Services Engine In root Privileged vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2015-005764" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "permissions and access control", "sources": [ { "db": "CNNVD", "id": "CNNVD-201511-103" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.