CVEvulnerability

CVE-2016-6377

8.1 HIGH Published 2016-09-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-09-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.

Affected configurations

• cisco media origination system suite 2.3\(1\) • cisco media origination system suite 2.3\(2\) • cisco media origination system suite 2.3\(6\) • cisco media origination system suite 2.3\(7\) • cisco media origination system suite 2.3\(8\) • cisco media origination system suite 2.3 base • cisco media origination system suite 2.4\(1\) • cisco media origination system suite 2.4 base • cisco media origination system suite 2.5\(0\) • cisco media origination system suite 2.5\(1\) • cisco media origination system suite 2.5 base • cisco media origination system suite 2.6 base

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References