What is the CVSS score of CVE-2015-7331?

CVE-2015-7331 has a CVSS 3.0 base score of 6.6 (Medium). CVSS vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N. EPSS exploitation probability: 0.4%.

Mcollective Puppet Agent CVE-2015-7331

MEDIUM

7PK - Security Features (CWE-254)

2017-01-30 cve@mitre.org

RCE Mcollective Puppet Agent

6.6

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

6.6 MEDIUM

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Jan 30, 2017 - 22:59 cve.org

MEDIUM 6.6

DescriptionCVE.org

The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument.

AnalysisAI

The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-254. The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument. Affected products include: Puppetlabs Mcollective-Puppet-Agent. Version information: before 1.11.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.