CVEvulnerability

CVE-2016-1420

7.8 HIGH Published 2016-06-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-06-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.

Affected configurations

• cisco application infrastructure controller • cisco application policy infrastructure controller firmware 1.0\(1e\) • cisco application policy infrastructure controller firmware 1.0\(1h\) • cisco application policy infrastructure controller firmware 1.0\(1k\) • cisco application policy infrastructure controller firmware 1.0\(1n\) • cisco application policy infrastructure controller firmware 1.0\(2j\) • cisco application policy infrastructure controller firmware 1.0\(2m\) • cisco application policy infrastructure controller firmware 1.0\(3f\) • cisco application policy infrastructure controller firmware 1.0\(3i\) • cisco application policy infrastructure controller firmware 1.0\(3k\) • cisco application policy infrastructure controller firmware 1.0\(3n\) • cisco application policy infrastructure controller firmware 1.0\(4h\) • cisco application policy infrastructure controller firmware 1.0\(4o\) • cisco application policy infrastructure controller firmware 1.1\(0.920a\) • cisco application policy infrastructure controller firmware 1.1\(1j\) • cisco application policy infrastructure controller firmware 1.1\(3f\)

References