Vulnerability Details CVE-2015-0692
Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.4%
CVSS Severity
CVSS v2 Score 7.2
References
Products affected by CVE-2015-0692
-
cpe:2.3:a:cisco:web_security_appliance:8.5_base