CVE Daily

CVE-2015-6362

The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35)...

Medium CVSS 4.0

Overview

The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.

CWE: CWE-264 Published: 2015-11-10T03:59:01.473
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags