CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: a local file script in cisco telepresence video communication server (vcs) expressway x8.5.2 allows local users to gain privileges for os command execution via invalid parameters, aka bug id cscuv10556.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-09-02
Last Modified Date: 2017-01-04