CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 8.3
CWE Name:  Permissions Privileges and Access Controls
Summary: the firewall subsystem in cisco telepresence tc software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka bug id cscts37781.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-06-21
Last Modified Date: 2013-06-21