CVE-2014-7990
cisco: no CVSS score yet. EPSS 0.3% chance of exploitation in the next 30 days.
Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815.
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:air-ct5760
- cisco:ios_xe
- cisco:ws-c3850
- cisco:ws-c3860