CVE-2016-1420
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.
El componente de instalación en dispositivos Cisco Application Policy Infrastructure Controller (APIC) con software en versiones anteriores a 1.3(2f) no maneja correctamente archivos binarios, lo que permite a usuarios locales obtener acceso root a través de vectores no especificados, también conocido como Bug ID CSCuz72347.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-01-04 CVE Reserved
- 2016-06-10 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-apic | 2016-06-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(1e\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(1e\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(1h\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(1h\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(1k\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(1k\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(1n\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(1n\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(2j\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(2j\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(2m\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(2m\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(3f\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(3f\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(3i\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(3i\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(3k\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(3k\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(3n\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(3n\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(4h\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(4h\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.0\(4o\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.0\(4o\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.1\(0.920a\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.1\(0.920a\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.1\(1j\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.1\(1j\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Application Infrastructure Controller Search vendor "Cisco" for product "Application Infrastructure Controller" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Application Policy Infrastructure Controller Firmware Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" | 1.1\(3f\) Search vendor "Cisco" for product "Application Policy Infrastructure Controller Firmware" and version "1.1\(3f\)" | - |
Affected
|