Vulnerability Details : CVE-2014-0676
Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367.
Exploit prediction scoring system (EPSS) score for CVE-2014-0676
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-0676
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
6.8
|
MEDIUM | AV:L/AC:L/Au:S/C:C/I:C/A:C |
3.1
|
10.0
|
NIST |
CWE ids for CVE-2014-0676
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-0676
-
http://www.securityfocus.com/bid/65083
Cisco NX-OS Software TACACS+ Server Local Privilege Escalation VulnerabilityThird Party Advisory;VDB Entry
-
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0676
Cisco NX-OS Software TACACS+ Command Authorization VulnerabilityVendor Advisory
-
http://www.securitytracker.com/id/1029690
Cisco NX-OS Lets Local Users Bypass TACACS+ Authorization to Execute Commands - SecurityTrackerThird Party Advisory;VDB Entry
-
http://tools.cisco.com/security/center/viewAlert.x?alertId=32531
Cisco NX-OS Software TACACS+ Command Authorization VulnerabilityVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/90627
Cisco NX-OS TACACS privilege escalation CVE-2014-0676 Vulnerability Report
Products affected by CVE-2014-0676
- cpe:2.3:o:cisco:nx-os:-:*:*:*:*:*:*:*