Lucene search

[email protected]CVE-2016-1320

HistoryFeb 12, 2016 - 1:59 a.m.

CVE-2016-1320

2016-02-1201:59:03

CWE-78

CWE-264

[email protected]

web.nvd.nist.gov

cisco

prime collaboration

cli

local users

arbitrary os commands

root

bug id

cscux69286

6.8 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286.

Affected configurations

NVD

Node

ciscoprime_collaborationMatch9.0.0

ciscoprime_collaborationMatch9.0.5

ciscoprime_collaborationMatch11.0.0

CPENameOperatorVersion
cisco:prime_collaborationcisco prime collaborationeq9.0.0
cisco:prime_collaborationcisco prime collaborationeq9.0.5
cisco:prime_collaborationcisco prime collaborationeq11.0.0

CPE	Name	Operator	Version
cisco:prime_collaboration	cisco prime collaboration	eq	9.0.0
cisco:prime_collaboration	cisco prime collaboration	eq	9.0.5
cisco:prime_collaboration	cisco prime collaboration	eq	11.0.0

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160209-pcp

www.tenable.com/security/research/tra-2016-38

6.8 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2016-1320

prion1 cisco1 nessus1 cvelist1 nvd1