CVEvulnerability
CVE-2016-6414
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-09-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223.
Affected configurations
• cisco ios 15.6\(1\)t1
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-iox Vendor Advisory
- http://www.securityfocus.com/bid/93091 www.securityfocus.com
- http://www.securitytracker.com/id/1036876 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-iox Vendor Advisory
- http://www.securityfocus.com/bid/93091 www.securityfocus.com
- http://www.securitytracker.com/id/1036876 www.securitytracker.com