Lucene search

[email protected]NVD:CVE-2016-6402

HistorySep 18, 2016 - 10:59 p.m.

CVE-2016-6402

2016-09-1822:59:11

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.

Affected configurations

Nvd

Node

ciscounified_computing_systemMatch2.2\(1b\)

ciscounified_computing_systemMatch2.2\(1c\)

ciscounified_computing_systemMatch2.2\(1d\)

ciscounified_computing_systemMatch2.2\(1e\)

ciscounified_computing_systemMatch2.2\(1f\)

ciscounified_computing_systemMatch2.2\(1g\)

ciscounified_computing_systemMatch2.2\(1h\)

ciscounified_computing_systemMatch2.2\(2c\)

ciscounified_computing_systemMatch2.2\(2c\)a

ciscounified_computing_systemMatch2.2\(2d\)

ciscounified_computing_systemMatch2.2\(2e\)

ciscounified_computing_systemMatch2.2\(3a\)

ciscounified_computing_systemMatch2.2\(3b\)

ciscounified_computing_systemMatch2.2\(3c\)

ciscounified_computing_systemMatch2.2\(3d\)

ciscounified_computing_systemMatch2.2\(3e\)

ciscounified_computing_systemMatch2.2\(3f\)

ciscounified_computing_systemMatch2.2\(3g\)

ciscounified_computing_systemMatch2.2\(4b\)

ciscounified_computing_systemMatch2.2\(4c\)

ciscounified_computing_systemMatch2.2\(5a\)

ciscounified_computing_systemMatch2.2\(5b\)a

ciscounified_computing_systemMatch2.2_base

ciscounified_computing_systemMatch3.0\(1c\)

ciscounified_computing_systemMatch3.0\(1d\)

ciscounified_computing_systemMatch3.0\(1e\)

ciscounified_computing_systemMatch3.0\(2c\)

ciscounified_computing_systemMatch3.0\(2d\)

VendorProductVersionCPE
ciscounified_computing_system2.2(1b)cpe:2.3:a:cisco:unified_computing_system:2.2\(1b\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(1c)cpe:2.3:a:cisco:unified_computing_system:2.2\(1c\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(1d)cpe:2.3:a:cisco:unified_computing_system:2.2\(1d\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(1e)cpe:2.3:a:cisco:unified_computing_system:2.2\(1e\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(1f)cpe:2.3:a:cisco:unified_computing_system:2.2\(1f\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(1g)cpe:2.3:a:cisco:unified_computing_system:2.2\(1g\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(1h)cpe:2.3:a:cisco:unified_computing_system:2.2\(1h\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(2c)cpe:2.3:a:cisco:unified_computing_system:2.2\(2c\):*:*:*:*:*:*:*
ciscounified_computing_system2.2(2c)acpe:2.3:a:cisco:unified_computing_system:2.2\(2c\)a:*:*:*:*:*:*:*
ciscounified_computing_system2.2(2d)cpe:2.3:a:cisco:unified_computing_system:2.2\(2d\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_computing_system	2.2(1b)	cpe:2.3:a:cisco:unified_computing_system:2.2\(1b\):::::::*
cisco	unified_computing_system	2.2(1c)	cpe:2.3:a:cisco:unified_computing_system:2.2\(1c\):::::::*
cisco	unified_computing_system	2.2(1d)	cpe:2.3:a:cisco:unified_computing_system:2.2\(1d\):::::::*
cisco	unified_computing_system	2.2(1e)	cpe:2.3:a:cisco:unified_computing_system:2.2\(1e\):::::::*
cisco	unified_computing_system	2.2(1f)	cpe:2.3:a:cisco:unified_computing_system:2.2\(1f\):::::::*
cisco	unified_computing_system	2.2(1g)	cpe:2.3:a:cisco:unified_computing_system:2.2\(1g\):::::::*
cisco	unified_computing_system	2.2(1h)	cpe:2.3:a:cisco:unified_computing_system:2.2\(1h\):::::::*
cisco	unified_computing_system	2.2(2c)	cpe:2.3:a:cisco:unified_computing_system:2.2\(2c\):::::::*
cisco	unified_computing_system	2.2(2c)a	cpe:2.3:a:cisco:unified_computing_system:2.2\(2c\)a:::::::*
cisco	unified_computing_system	2.2(2d)	cpe:2.3:a:cisco:unified_computing_system:2.2\(2d\):::::::*

Rows per page:

1-10 of 281

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ucs

www.securityfocus.com/bid/92956

www.securitytracker.com/id/1036831

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2016-6402

openvas1 prion1 cisco1 cvelist1 cve1