Description (CNA)
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1031924
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0660
ADP enrichment
No English description supplied.