CVE-2015-0691 A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.
HighCVSS 9.3
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure desktop | = 3.0_base | No fix listed |
| cisco secure desktop | = 3.1.0.31 | No fix listed |
| cisco secure desktop | = 3.1.1 | No fix listed |
| cisco secure desktop | = 3.1.1.45 | No fix listed |
| cisco secure desktop | = 3.1_base | No fix listed |
| cisco secure desktop | = 3.2.0.136 | No fix listed |
| cisco secure desktop | = 3.2.1.103 | No fix listed |
| cisco secure desktop | = 3.2.1.126 | No fix listed |
| cisco secure desktop | = 3.2_base | No fix listed |
| cisco secure desktop | = 3.3.0.118 | No fix listed |
| cisco secure desktop | = 3.3.0.151 | No fix listed |
| cisco secure desktop | = 3.3_base | No fix listed |
| cisco secure desktop | = 3.4.0373 | No fix listed |
| cisco secure desktop | = 3.4.1108 | No fix listed |
| cisco secure desktop | = 3.4.2048 | No fix listed |
| cisco secure desktop | = 3.4_base | No fix listed |
| cisco secure desktop | = 3.5.841 | No fix listed |
| cisco secure desktop | = 3.5.1077 | No fix listed |
| cisco secure desktop | = 3.5.2001 | No fix listed |
| cisco secure desktop | = 3.5.2003 | No fix listed |
| cisco secure desktop | = 3.5.2008 | No fix listed |
| cisco secure desktop | = 3.5_base | No fix listed |
| cisco secure desktop | = 3.6.181 | No fix listed |
| cisco secure desktop | = 3.6.185 | No fix listed |
| cisco secure desktop | = 3.6.1001 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure desktop | = 3.6.2002 | No fix listed |
| cisco secure desktop | = 3.6.3002 | No fix listed |
| cisco secure desktop | = 3.6.4021 | No fix listed |
| cisco secure desktop | = 3.6.5005 | No fix listed |
| cisco secure desktop | = 3.6.6020 | No fix listed |
| cisco secure desktop | = 3.6.6104 | No fix listed |
| cisco secure desktop | = 3.6.6203 | No fix listed |
| cisco secure desktop | = 3.6.6210 | No fix listed |
| cisco secure desktop | = 3.6.6228 | No fix listed |
| cisco secure desktop | = 3.6.6234 | No fix listed |
| cisco secure desktop | = 3.6.6249 | No fix listed |
| cisco secure desktop | = 3.6_base | No fix listed |
References
- 20150415 Cisco Secure Desktop Cache Cleaner Command Execution Vulnerability mitigation vendor-advisory
- 1032140 third-party-advisory vdb-entry