CVE-2016-6374

EPSS 5.62%
Veröffentlicht 22.09.2016 22:59:21
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Cloud Services Platform 2100 Version2.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.62%	0.9

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-2

Vendor Advisory

http://www.securityfocus.com/bid/93095

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1036864

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-6374

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6374

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6374

EUVD