Skip to content

CVE-2015-4232

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS...

4.6 Medium

CVE-2015-4232 is a medium vulnerability (CVSS 4.6) in Cisco Nx-os, published July 3, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 34th percentile. No source names a fixed version.

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.

Exploit likelihood

0.41%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.

Record: CVE-2015-4232
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.

Record: CVE-2015-4232
Updated: 2026-11-02

EUVDEUVD-2015-4255 No score

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.

Record: EUVD-2015-4255
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3hq6-jjwr-fjv7 No score

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS...

Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.

Record: GHSA-3hq6-jjwr-fjv7
Updated: 2026-11-02

Affected products

cisco nx-os

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References