AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-7990

MEDIUM · CVSS 6.8 EPSS 0.34%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-11-07 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It affects Cisco, Linux.

CVE
CVE-2014-7990
Severity
MEDIUM
CVSS
6.8
EPSS
0.34%
Cisco Linux

Original NVD Description

Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815.