CVE-2015-0768

The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA…

published June 12, 2015

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02071 · 81.2th percentile
Published
2015-06-12T14:00Z
EPSS history
Timeline
  • 12 JUN 14:00Z
    The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA…
    cvelistv5