10

CVE-2016-9223

EPSS 1.75%
Veröffentlicht 26.12.2016 08:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO; formerly CliQr) could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco CloudCenter Orchestrator (CCO) deployments where the Docker Engine TCP port 2375 is open on the system and bound to local address 0.0.0.0 (any interface).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Cloudcenter Orchestrator Version4.4.0

Cisco ≫ Cloudcenter Orchestrator Version4.5.0

Cisco ≫ Cloudcenter Orchestrator Version4.6.0

Cisco ≫ Cloudcenter Orchestrator Version4.6.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.75%	0.808

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/bid/95024

Third Party Advisory

VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-cco

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2016-9223

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9223

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9223

EUVD