CVE-2015-6385

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-12-01 · updated 2026-06-17
Weakness: CWE-20

Description

The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943.

Affected products

Cisco IOS: 15.5(2)s, 15.5(3)s

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-csr
http://www.securitytracker.com/id/1034274
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-csr
http://www.securitytracker.com/id/1034274

Get alerted when CVE-2015-6385 or the next vulnerability affects your stack