10
CVE-2016-6406
- EPSS 2.88%
- Veröffentlicht 22.09.2016 22:59:22
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle psirt@cisco.com
- CVE-Watchlists
- Unerledigt
LoginCisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client before 1.0.2-065 is installed, allows remote attackers to obtain root access via a connection to the testing/debugging interface, aka Bug ID CSCvb26017.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Email Security Appliance Firmware Version9.1.2-023
Cisco ≫ Email Security Appliance Firmware Version9.1.2-028
Cisco ≫ Email Security Appliance Firmware Version9.1.2-036
Cisco ≫ Email Security Appliance Firmware Version9.7.2-046
Cisco ≫ Email Security Appliance Firmware Version9.7.2-047
Cisco ≫ Email Security Appliance Firmware Version9.7.2-054
Cisco ≫ Email Security Appliance Firmware Version10.0.0-124
Cisco ≫ Email Security Appliance Firmware Version10.0.0-125
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.88% | 0.85 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|