CVE-2019-15996

Cisco DNA Spaces: Connector Privilege Escalation Vulnerability

Medium · published November 26, 2019

CVSS v3.0
6.7
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient restrictions during the execution of an affected CLI command. An attacker could exploit this vulnerability by leveraging the insufficient restrictions to modify sensitive files. A successful exploit could allow the attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Published
2019-11-26T03:41Z
EPSS history
Timeline
  • 26 NOV 03:41Z
    Cisco DNA Spaces: Connector Privilege Escalation Vulnerability
    cvelistv5