CVE-2015-0179 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2	EPSS V3
2022-02-06	–	–	1.83%	–
2022-02-13	–	–	1.83%	–
2022-04-03	–	–	1.83%	–
2022-06-19	–	–	1.83%	–
2022-10-30	–	–	1.83%	–
2023-01-01	–	–	1.83%	–
2023-01-15	–	–	1.83%	–
2023-03-12	–	–	–	0.04%
2024-02-11	–	–	–	0.04%
2024-02-25	–	–	–	0.04%
2024-04-07	–	–	–	0.04%
2024-06-02	–	–	–	0.04%
2024-07-21	–	–	–	0.04%
2024-08-04	–	–	–	0.04%
2024-08-11	–	–	–	0.04%
2024-11-24	–	–	–	0.04%
2025-02-23	–	–	–	0.04%
2025-01-19	–	–	–	0.04%
2025-01-19	–	–	–	0.04,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	54%
2022-02-13	55%
2022-04-03	75%
2022-06-19	76%
2022-10-30	77%
2023-01-01	76%
2023-01-15	77%
2023-03-12	11%
2024-02-11	1%
2024-02-25	11%
2024-04-07	12%
2024-06-02	13%
2024-07-21	14%
2024-08-04	13%
2024-08-11	14%
2024-11-24	15%
2025-02-23	16%
2025-01-19	15%
2025-01-19	15%

# Exploit Title: Lotus Notes Diagnostic Tool (nsd.exe) Privelege Escalation # Date: 02-09-2017 # Exploit Author: ParagonSec # Website: https://github.com/paragonsec # Version: 8.5 & 9.0 # Tested on: Windows 7 Enterprise # CVE: CVE-2015-0179 # Vendor CVE URL: http://www-01.ibm.com/support/docview.wss?uid=swg21700029 # Category: Local & Privilege Escalation Exploit 1. Description Lotus Notes Diagnostic Tool (nsd.exe) runs under NT Authority/System rights. This can be leveraged to run a program under the System context and elevate local privileges. 2. Proof of Concept First you need to execute nsd.exe under the monitor/CLI mode: > nsd.exe -monitor Next, after NSD finishes loading you can execute any program under the System context. In this example we will execute CMD. nsd> LOAD CMD You will see that cmd is opened as System now. Also, NSD can be used to attach, kill processes or create memory dumps under the System context. 3. Solution: This has been fixed on release 9.0.1 FP3 and 8.5.3 FP6.