CVE-2015-4330: OS Command Injection
Published Sep 2, 2015
·Updated
A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556.
Affected Software
1 affected component
Cisco Telepresence Video Communication Server Software=x8.5.2
Event History
Sep 2, 2015
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4330?
CVE-2015-4330 is classified as a medium severity vulnerability.
2
How do I fix CVE-2015-4330?
To fix CVE-2015-4330, upgrade to a later, patched version of Cisco TelePresence Video Communication Server.
3
Who is affected by CVE-2015-4330?
CVE-2015-4330 affects users of Cisco TelePresence Video Communication Server software version X8.5.2.
4
What type of vulnerability is CVE-2015-4330?
CVE-2015-4330 is a local file script vulnerability that allows OS command execution.
5
Can CVE-2015-4330 be exploited remotely?
CVE-2015-4330 requires local access to exploit, thus it cannot be exploited remotely.