CVE-2015-0750 — MEDIUM (6.5)

Vulnerability Description

The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786.

CVSS Score

6.5

MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Cisco	Hosted Collaboration Solution	8.0\(2\)_base

Related Weaknesses (CWE)

CWE-264

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=38969Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=38969Vendor Advisory

FAQ

What is CVE-2015-0750?

CVE-2015-0750 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified field...

How severe is CVE-2015-0750?

CVE-2015-0750 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-0750?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Hosted Collaboration Solution.