What is the CVSS score of CVE-2015-6860?

CVE-2015-6860 has a CVSS 3.0 base score of 8.4 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2015-6860?

Yes, a patch is available for CVE-2015-6860. Update the affected software to the latest version immediately.

Network Switch Software CVE-2015-6860

HIGH

Permissions, Privileges, and Access Controls (CWE-264)

2016-01-05 cve@mitre.org

Privilege Escalation Network Switch Software J8692A J8693A J8697A J8698A J8699A J8700A J8715A J8715B J8992A J9091A J9263A J9264A J9265A J9310A J9311A J9447A J9448A J9451A J9452A J9470A J9471A J9472A J9473A J9475A J9532A J9533A J9539A J9540A J9573A J9574A J9575A J9576A J9584A J9585A J9586A J9587A J9588A J9638A J9639A J9640A J9641A J9642A J9643A J9821A J9822A J9823A J9824A J9825A J9826A J9850A J9851A J9866A J9868A

8.4

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jan 05, 2016 - 11:59 cve.org

HIGH 8.4

DescriptionCVE.org

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859.

AnalysisAI

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-264. HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859. Affected products include: Hp Network Switch Software, Hp J8692A, Hp J8693A, Hp J8697A, Hp J8698A.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.