Unrated severityNVD Advisory· Published Nov 6, 2015· Updated Jun 17, 2026
CVE-2015-4282
CVE-2015-4282
Description
Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.
Affected products
15cpe:2.3:a:cisco:mobility_services_engine:5.1_base:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:cisco:mobility_services_engine:5.1_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:5.2_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:6.0_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.0_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.4.100.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.4.110.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.4.121.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.4_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.5.102.101:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.6.100.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.6.120.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:7.6.132.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:8.0\(110.0\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:mobility_services_engine:8.0_base:*:*:*:*:*:*:*
- (no CPE)range: <=8.0.120.7
Patches
Vulnerability mechanics
References
3- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-privmsenvdVendor Advisory
- www.securityfocus.com/bid/77435nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1034066nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.