CVEvulnerability
CVE-2016-6397
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Media Services (UMS) could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affected Products: This vulnerability affects Cisco IPICS releases 4.8(1) to 4.10(1). More Information: CSCva46644. Known Affected Releases: 4.10(1) 4.8(1) 4.8(2) 4.9(1) 4.9(2).
Affected configurations
• cisco ip interoperability and collaboration system 4.8\(1\)
• cisco ip interoperability and collaboration system 4.8\(2\)
• cisco ip interoperability and collaboration system 4.9\(1\)
• cisco ip interoperability and collaboration system 4.9\(2\)
• cisco ip interoperability and collaboration system 4.10\(1\)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.securityfocus.com/bid/93913 www.securityfocus.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics Vendor Advisory
- http://www.securityfocus.com/bid/93913 www.securityfocus.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics Vendor Advisory