CVE-2015-2955

HIGH 7.5CVE-2015-2955 · Published 13/06/2015 · updated 17/06/2026

In short

CVE-2015-2955 is a HIGH (CVSS 7.5) vulnerability affecting milkystep light (igreks), milkystep professional (igreks), milkystep professional oem (igreks).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
milkystep light igreks	`≤ 0.94`	No fix yet
milkystep professional igreks	`≤ 1.82`	No fix yet
milkystep professional oem igreks	`≤ 1.82`	No fix yet

Description

Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

References

jvn.jp/en/jp/JVN05559185/995646/index.html
jvn.jp/en/jp/JVN05559185/index.html · Vendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2015-000080 · Vendor Advisory
securityfocus.com/bid/75074

More vulnerabilities in milkystep light

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2015-2955 is a HIGH (CVSS 7.5) vulnerability affecting milkystep light (igreks), milkystep professional (igreks), milkystep professional oem (igreks).

Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.6% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

milkystep light

igreks

≤ 0.94

No fix yet

milkystep professional

igreks

≤ 1.82

No fix yet

milkystep professional oem

igreks

≤ 1.82

No fix yet

More vulnerabilities in milkystep light

See all →