PT-2015-7175 · Cisco · Cisco Aironet 1850

Published 2015-10-13 · Updated 2016-12-12 · CVE-2015-6315

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1850 access points version 8.1(112.4)

Description The issue allows local users to gain privileges via crafted CLI commands.

Recommendations For Cisco Aironet 1850 access points version 8.1(112.4), consider restricting access to the CLI to minimize the risk of exploitation until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-6315

Affected Products

Cisco Aironet 1850

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151005-aironet · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6315 · Security Note
• http://securitytracker.com/id/1033746 · Note