CVE-2016-9867

EPSS 0.08%
Veröffentlicht 06.01.2017 22:59:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle security_alert@emc.com
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client (SDC) servers.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Scaleio Version <= 2.0.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.212

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2	6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://www.securityfocus.com/archive/1/539983/30/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/95300

https://nvd.nist.gov/vuln/detail/CVE-2016-9867

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9867

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9867

EUVD