Vulnerability Description
The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Content Services Switch 11500 Firmware | <= 8.20.4.02 |
| Cisco | Content Services Switch 11500 | All versions |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37889Vendor Advisory
- http://www.securitytracker.com/id/1031939
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37889Vendor Advisory
- http://www.securitytracker.com/id/1031939
FAQ
What is CVE-2015-0667?
CVE-2015-0667 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted S...
How severe is CVE-2015-0667?
CVE-2015-0667 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0667?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Content Services Switch 11500 Firmware, Cisco Content Services Switch 11500.