CVE-2015-6362 The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by....
MediumCVSS 4.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco connected grid network management system | = 3.0(0.35) | No fix listed |
| cisco connected grid network management system | = 3.0(0.54) | No fix listed |
References
- 20151109 Cisco Connected Grid Network Management System Privilege Escalation Vulnerability vendor-advisory
- 1034106 vdb-entry