Unscored CVE-2015-0660 EUVD-2015-0673GHSA-hc47-w8mm-qg2f

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary…

Published Mar 14, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.

References

1031924 vdb-entry
20150312 Cisco Virtual TelePresence Server Serial Console Privileged Access vendor-advisory