CVE-2016-9867

EPSS 0.08%
Published 06.01.2017 22:59:00
Last modified 20.04.2025 01:37:25
Source security_alert@emc.com
Teams watchlist Login
Open Login

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client (SDC) servers.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Emc ≫ Scaleio Version <= 2.0.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.212

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2	6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://www.securityfocus.com/archive/1/539983/30/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/95300

https://nvd.nist.gov/vuln/detail/CVE-2016-9867

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9867

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9867

EUVD