CVEvulnerability
CVE-2016-1366
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-03-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:C/A:N
- Weaknesses
- CWE-264
Description
The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848.
Affected configurations
• cisco ios xr 5.0.0
• cisco ios xr 5.0.1
• cisco ios xr 5.2.1
• cisco ios xr 5.2.3
• cisco ios xr 5.2.4
• cisco ios xr 5.2.5
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs Vendor Advisory
- http://www.securitytracker.com/id/1035407 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs Vendor Advisory
- http://www.securitytracker.com/id/1035407 www.securitytracker.com