CVEvulnerability
CVE-2016-6373
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-09-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.
Affected configurations
• cisco cloud services platform 2100 2.0.0 base
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1 Vendor Advisory
- http://www.securityfocus.com/bid/93093 www.securityfocus.com
- http://www.securitytracker.com/id/1036865 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1 Vendor Advisory
- http://www.securityfocus.com/bid/93093 www.securityfocus.com
- http://www.securitytracker.com/id/1036865 www.securitytracker.com