CVE-2016-1420

EPSS 0.23%
Veröffentlicht 10.06.2016 01:59:05
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Application Infrastructure Controller Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.43

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-apic

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1420

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1420

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1420

EUVD