# CVSS v2: Attack Gains All Privileges CVEs whose attack gains all privileges on the system (CVSS v2). Source: https://docs.deepinfo.com/reference/vulnerability/search/examples/metrics-cvss-metric-v2-obtain-all-privilege/ Last updated: 2026-09-26 --- `POST https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25` CVEs whose attack gains all privileges on the system (CVSS v2). Example 16 of 19 in **Filters › CVSS v2** · [Vulnerability Search Examples](/reference/vulnerability/search/examples/) · endpoint: [Search](/reference/vulnerability/search/) Tags: `field` `metrics.cvss_metric_v2.obtain_all_privilege` · `operator` `eq` `metrics.cvss_metric_v2.obtain_all_privilege` is whether the attack gains all privileges on the system, in the CVSS v2 metric (`metrics.cvss_metric_v2`, one entry per scoring source). `eq` matches the exact value `true`. In the response, look at `results[].metrics.cvss_metric_v2[].obtain_all_privilege`. ## Request | Parameter | In | Value | |---|---|---| | `page_size` | query | `25` | | `filters.must[0].name` | body | `metrics.cvss_metric_v2.obtain_all_privilege` | | `filters.must[0].type` | body | `eq` | | `filters.must[0].value` | body | `true` | ```bash curl -X POST 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25' \ -H 'apikey: YOUR_API_KEY' \ -H 'Accept: application/json' \ -H 'Content-Type: application/json' \ -d '{ "filters": { "must": [ { "name": "metrics.cvss_metric_v2.obtain_all_privilege", "type": "eq", "value": true } ] } }' ``` ## Response ### 200 · OK > Shortened for this page: results: 3 of 25 shown; results[].enrichment.cwe[].capec_id: first 10 items `Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a` ```json { "page": 1, "page_size": 25, "result_count": 5225, "results": [ { "id": "CVE-2015-7930", "source_identifier": "user@hq.dhs.gov", "published": "2015-12-24T01:59:00Z", "last_modified": "2026-06-17T00:33:24Z", "status": "Modified", "evaluator_comment": "CWE-798: Use of Hard-coded Credentials", "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors." }, { "lang": "es", "value": "Adcon Telemetry A840 Telemetry Gateway Base Station tiene credenciales embebidas, lo que permite a atacantes remotos obtener acceso administrativo a través de vectores no especificados." } ], "references": [ { "url": "http://www.securityfocus.com/bid/79345", "source": "user@hq.dhs.gov", "tags": null }, { "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01", "source": "user@hq.dhs.gov", "tags": [ "Third Party Advisory", "US Government Resource" ] }, { "url": "http://www.securityfocus.com/bid/79345", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": null }, { "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "US Government Resource" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "CHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 10.0, "base_severity": "CRITICAL", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 3.9, "impact_score": 6.0 } ], "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "access_vector": "NETWORK", "access_complexity": "LOW", "authentication": "NONE", "confidentiality_impact": "COMPLETE", "integrity_impact": "COMPLETE", "availability_impact": "COMPLETE", "base_score": 10.0, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "HIGH", "exploitability_score": 10.0, "impact_score": 10.0, "ac_insuf_info": false, "obtain_all_privilege": true, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": null } ] }, "weaknesses": [ { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:adcon:a840_telemetry_gateway_base_station_firmware:*:*:*:*:*:*:*:*", "match_criteria_id": "EE7BAEF9-4495-46CE-A797-8A88ABAAB979", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:o:adcon:a840_telemetry_gateway_base_station_firmware:*:*:*:*:*:*:*:*", "vendor": "adcon", "product": "a840_telemetry_gateway_base_station_firmware", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null } ], "cwe": null, "epss_score": { "epss": 0.02521, "percentile": 0.8417, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.0", "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.0", "vector_string": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "CRITICAL" } } } }, { "id": "CVE-2015-7113", "source_identifier": "user@apple.com", "published": "2015-12-11T12:00:10Z", "last_modified": "2026-06-17T00:31:56Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist." }, { "lang": "es", "value": "El componente LaunchServices en Apple iOS en versiones anteriores a 9.2 y watchOS en versiones anteriores a 2.1 permite a atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una lista de propiedades mal formada." } ], "references": [ { "url": "http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html", "source": "user@apple.com", "tags": [ "Vendor Advisory" ] }, { "url": "http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html", "source": "user@apple.com", "tags": [ "Vendor Advisory" ] }, { "url": "http://www.securitytracker.com/id/1034348", "source": "user@apple.com", "tags": null }, { "url": "https://support.apple.com/HT205635", "source": "user@apple.com", "tags": [ "Vendor Advisory" ] }, { "url": "https://support.apple.com/HT205641", "source": "user@apple.com", "tags": [ "Vendor Advisory" ] }, { "url": "http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ] }, { "url": "http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ] }, { "url": "http://www.securitytracker.com/id/1034348", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": null }, { "url": "https://support.apple.com/HT205635", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ] }, { "url": "https://support.apple.com/HT205641", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "access_vector": "NETWORK", "access_complexity": "LOW", "authentication": "NONE", "confidentiality_impact": "COMPLETE", "integrity_impact": "COMPLETE", "availability_impact": "COMPLETE", "base_score": 10.0, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "HIGH", "exploitability_score": 10.0, "impact_score": 10.0, "ac_insuf_info": true, "obtain_all_privilege": true, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-119" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "match_criteria_id": "04EA4C73-EC97-4FC8-9AA5-D9B4A3EA869C", "version_start_including": null, "version_start_excluding": null, "version_end_including": "9.1", "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*", "match_criteria_id": "8DC0DA9C-1E1D-4034-9BC3-3304B89F4C9D", "version_start_including": null, "version_start_excluding": null, "version_end_including": "2.0", "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vendor": "apple", "product": "iphone_os", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": "9.1", "version_end_excluding": null, "affected_versions_first": "1.0.0", "affected_versions_last": "9.1" }, { "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*", "vendor": "apple", "product": "watchos", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": "2.0", "version_end_excluding": null, "affected_versions_first": "1.0", "affected_versions_last": "2.0" } ], "cwe": [ { "id": 119, "owasptop10_2021": null, "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "description": "The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.", "capec_id": [ 8, 9, 10, 14, 24, 42, 44, 45, 46, 47 ], "scope": [ "Availability", "Confidentiality", "Integrity" ], "impact": [ "DoS: Crash, Exit, or Restart", "DoS: Resource Consumption (CPU)", "DoS: Resource Consumption (Memory)", "Execute Unauthorized Code or Commands", "Modify Memory", "Read Memory" ], "detection_method": [ "Architecture or Design Review", "Automated Dynamic Analysis", "Automated Static Analysis", "Automated Static Analysis - Binary or Bytecode", "Automated Static Analysis - Source Code", "Dynamic Analysis with Automated Results Interpretation", "Dynamic Analysis with Manual Results Interpretation", "Manual Static Analysis - Binary or Bytecode", "Manual Static Analysis - Source Code" ] } ], "epss_score": { "epss": 0.02828, "percentile": 0.86017, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": null, "user_interaction": null, "vulnerable_system_confidentiality": "COMPLETE", "vulnerable_system_integrity": "COMPLETE", "vulnerable_system_availability": "COMPLETE", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "HIGH" } } } }, { "id": "CVE-2015-1171", "source_identifier": "user@mitre.org", "published": "2015-08-28T21:59:01Z", "last_modified": "2026-06-17T00:21:53Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file." }, { "lang": "es", "value": "Desbordamiento del buffer basado en pila en GSM SIM Utility (también conocido como SIM Card Editor) 6.6, permite a atacantes remotos ejecutar código arbitrario a través de una entrada de gran longitud en un archivo .sms." } ], "references": [ { "url": "http://packetstormsecurity.com/files/129992/simeditor-overflow.txt", "source": "user@mitre.org", "tags": [ "Exploit" ] }, { "url": "https://osandamalith.wordpress.com/2015/01/16/sim-editor-stack-based-buffer-overflow/", "source": "user@mitre.org", "tags": [ "Exploit" ] }, { "url": "https://www.youtube.com/watch?v=tljbFpYtDTk", "source": "user@mitre.org", "tags": [ "Exploit" ] }, { "url": "http://packetstormsecurity.com/files/129992/simeditor-overflow.txt", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit" ] }, { "url": "https://osandamalith.wordpress.com/2015/01/16/sim-editor-stack-based-buffer-overflow/", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit" ] }, { "url": "https://www.youtube.com/watch?v=tljbFpYtDTk", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "access_vector": "NETWORK", "access_complexity": "LOW", "authentication": "NONE", "confidentiality_impact": "COMPLETE", "integrity_impact": "COMPLETE", "availability_impact": "COMPLETE", "base_score": 10.0, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "HIGH", "exploitability_score": 10.0, "impact_score": 10.0, "ac_insuf_info": false, "obtain_all_privilege": true, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-119" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:gsm:sim_card_editor:6.6:*:*:*:*:*:*:*", "match_criteria_id": "464CEEC9-370F-45B9-B861-7ADF617BF6C7", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:gsm:sim_card_editor:6.6:*:*:*:*:*:*:*", "vendor": "gsm", "product": "sim_card_editor", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "6.6", "affected_versions_last": "6.6" } ], "cwe": [ { "id": 119, "owasptop10_2021": null, "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "description": "The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.", "capec_id": [ 8, 9, 10, 14, 24, 42, 44, 45, 46, 47 ], "scope": [ "Availability", "Confidentiality", "Integrity" ], "impact": [ "DoS: Crash, Exit, or Restart", "DoS: Resource Consumption (CPU)", "DoS: Resource Consumption (Memory)", "Execute Unauthorized Code or Commands", "Modify Memory", "Read Memory" ], "detection_method": [ "Architecture or Design Review", "Automated Dynamic Analysis", "Automated Static Analysis", "Automated Static Analysis - Binary or Bytecode", "Automated Static Analysis - Source Code", "Dynamic Analysis with Automated Results Interpretation", "Dynamic Analysis with Manual Results Interpretation", "Manual Static Analysis - Binary or Bytecode", "Manual Static Analysis - Source Code" ] } ], "epss_score": { "epss": 0.62663, "percentile": 0.99156, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": null, "user_interaction": null, "vulnerable_system_confidentiality": "COMPLETE", "vulnerable_system_integrity": "COMPLETE", "vulnerable_system_availability": "COMPLETE", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "HIGH" } } } } ] } ``` ## Related Examples - [CVSS v2: Insufficient Information](/reference/vulnerability/search/examples/metrics-cvss-metric-v2-ac-insuf-info/) - [CVSS v2: Attack Gains User Privileges](/reference/vulnerability/search/examples/metrics-cvss-metric-v2-obtain-user-privilege/) - [CVSS v2: Attack Gains Other Privileges](/reference/vulnerability/search/examples/metrics-cvss-metric-v2-obtain-other-privilege/) - [CVSS v2: User Interaction Required](/reference/vulnerability/search/examples/metrics-cvss-metric-v2-user-interaction-required/) - [CVSS v2: Medium Severity](/reference/vulnerability/search/examples/metrics-cvss-metric-v2-base-severity/) - [CVSS v2: Base Score of 10](/reference/vulnerability/search/examples/metrics-cvss-metric-v2-cvss-data-base-score/)