SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2013-3408

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764.

MEDIUM 6.8EPSS 0.34%

Does this matter?

Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.

Description

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764.

CVSS 2.0
6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C
EPSS
0.34% probability · 27th percentile
CISA KEV
Not listed
Weakness
CWE-264
Affected
cisco/virtualization experience client 6000 series firmware · cisco/virtualization experience client 6000 · cisco/virtualization experience client 6215
Source
psirt@cisco.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.