CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Privilege Management
Summary: a vulnerability in the cli of cisco ios xr software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system, because of incorrect permissions. more information: cscvb99389. known affected releases: 6.2.1.base. known fixed releases: 6.3.1.15i.base 6.2.3.1i.base 6.2.2.15i.base 6.1.4.10i.base.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-07-10
Last Modified Date: 2019-10-03