CVE-2015-0691 describes a critical vulnerability in a Cisco JAR file distributed with Cisco Secure Desktop (CSD) Cache Cleaner, allowing remote attackers to execute arbitrary commands through a crafted website. With a CVSS score of 9.3, this flaw presents a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, and it is not listed in CISA's KEV catalog. While it garnered some community discussion and media coverage at the time, it is currently considered inactive on the Hot List.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.0_baseCPE matchmatch criteria | cpe:2.3:a:cisco:secure_desktop:3.0_base:*:*:*:*:*:*:* | ||
3.1.0.31CPE matchmatch criteria | cpe:2.3:a:cisco:secure_desktop:3.1.0.31:*:*:*:*:*:*:* | ||
3.1.1CPE matchmatch criteria | cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:* | ||
3.1.1.45CPE matchmatch criteria | cpe:2.3:a:cisco:secure_desktop:3.1.1.45:*:*:*:*:*:*:* | ||
3.1_baseCPE matchmatch criteria | cpe:2.3:a:cisco:secure_desktop:3.1_base:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.