9.8
CVE-2016-6374
- EPSS 3.69%
- Veröffentlicht 22.09.2016 22:59:21
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle psirt@cisco.com
- CVE-Watchlists
- Unerledigt
LoginCisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Cloud Services Platform 2100 Version2.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.69% | 0.883 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-2
http://www.securityfocus.com/bid/93095
http://www.securitytracker.com/id/1036864