CVE-2015-4244: OS Command Injection
The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash (CF) file, aka Bug ID CSCuu75278.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4244?
CVE-2015-4244 is rated as a critical severity vulnerability due to the potential for arbitrary command execution.
How do I fix CVE-2015-4244?
To mitigate CVE-2015-4244, update the Cisco ASR 5000 and 5500 devices to the latest software version that contains the fix.
Who is affected by CVE-2015-4244?
CVE-2015-4244 affects local users with administrative privileges on Cisco ASR 5000 and 5500 devices running software version 14.0.
What types of devices are vulnerable to CVE-2015-4244?
CVE-2015-4244 impacts Cisco ASR 5000 and 5500 Series devices specifically with the 14.0 software version.
What is the impact of exploiting CVE-2015-4244?
Exploitation of CVE-2015-4244 allows attackers to execute arbitrary Linux commands on the affected Cisco devices.