6.8

CVE-2016-1366

EPSS 0.16%
Veröffentlicht 24.03.2016 22:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Xr Version5.0.0

Cisco ≫ Ios Xr Version5.0.1

Cisco ≫ Ios Xr Version5.2.1

Cisco ≫ Ios Xr Version5.2.3

Cisco ≫ Ios Xr Version5.2.4

Cisco ≫ Ios Xr Version5.2.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.372

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	6.8	8	6.9	AV:N/AC:L/Au:S/C:N/I:C/A:N

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs

Vendor Advisory

http://www.securitytracker.com/id/1035407

https://nvd.nist.gov/vuln/detail/CVE-2016-1366

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1366

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1366

EUVD