Description
The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202.
References
- 1032581 vdb-entry
- 72310 vdb-entry
- 20150612 Cisco IOS Software TCL Script Interpreter Privilege Escalation Vulnerability vendor-advisory