CVE-2015-4282

Published: Nov 6, 2015Modified: May 6, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.

Affected (14)

Products: Cisco: Mobility Services Engine

Cisco

1 product

Mobility Services Engine

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Cisco Mobility Services Engine	Version 5.1_base
Cisco Mobility Services Engine	Version 5.2_base
Cisco Mobility Services Engine	Version 6.0_base
Cisco Mobility Services Engine	Version 7.0_base
Cisco Mobility Services Engine	Version 7.4.100.0
Cisco Mobility Services Engine	Version 7.4.110.0
Cisco Mobility Services Engine	Version 7.4.121.0
Cisco Mobility Services Engine	Version 7.4_base
Cisco Mobility Services Engine	Version 7.5.102.101
Cisco Mobility Services Engine	Version 7.6.100.0
Cisco Mobility Services Engine	Version 7.6.120.0
Cisco Mobility Services Engine	Version 7.6.132.0
Cisco Mobility Services Engine	Version 8.0(110.0)
Cisco Mobility Services Engine	Version 8.0_base