CVE-2015-0768

Published: Jun 12, 2015Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371.

Affected (3)

Products: Cisco: Prime Network Control System

Cisco

1 product

Prime Network Control System

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Prime Network Control System	Version 2.1(0.0.85)
Cisco Prime Network Control System	Version 2.2(0.0.58)
Cisco Prime Network Control System	Version 2.2(0.0.69)

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=39192

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1032541

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://tools.cisco.com/security/center/viewAlert.x?alertId=39192

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1032541

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.