CVE-2015-6375 — Sensitive Information Exposure in Cisco IOS

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 80.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS
Timeline
PublishedNov 21
Latest updateMay 17

Description

The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDcisco/ios15.2\(2\)e3

🔴Vulnerability Details

2
GHSA
GHSA-cm3x-f29c-r8jp: The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15↗2022-05-17
▶
CVEList
CVE-2015-6375: The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15↗2015-11-21
▶

📋Vendor Advisories

1
Cisco
Cisco Networking Services Sensitive Information Disclosure Vulnerability↗2015-11-20
▶
CVE-2015-6375 — Sensitive Information Exposure in Cisco | cvebase