CVE-2015-4325: Medium severity cisco telepresence video communication server firmware vulnerability
The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4325?
CVE-2015-4325 has been classified with a high severity score due to the potential for privilege escalation by local users.
How do I fix CVE-2015-4325?
To fix CVE-2015-4325, upgrade your Cisco TelePresence Video Communication Server to a version that addresses this vulnerability.
Who is affected by CVE-2015-4325?
CVE-2015-4325 affects local users of Cisco TelePresence Video Communication Server software version X8.5.2.
What kind of vulnerability is CVE-2015-4325?
CVE-2015-4325 is a privilege escalation vulnerability that allows local users to gain elevated access rights.
What is the impact of CVE-2015-4325?
The impact of CVE-2015-4325 includes unauthorized access and potential control over administrative functions of the server.