Code injection

2016-06-1001:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.

CPENameOperatorVersion
application_policy_infrastructure_controller_firmwareeq1.1.101
application_policy_infrastructure_controller_firmwareeq1.1.104
application_policy_infrastructure_controller_firmwareeq1.1.107
application_policy_infrastructure_controller_firmwareeq1.1.110
application_policy_infrastructure_controller_firmwareeq1.2.106
application_policy_infrastructure_controller_firmwareeq1.2.109
application_policy_infrastructure_controller_firmwareeq1.3.102
application_policy_infrastructure_controller_firmwareeq1.3.105
application_policy_infrastructure_controller_firmwareeq1.3.107
application_policy_infrastructure_controller_firmwareeq1.3.110

Name	Operator	Version
application_policy_infrastructure_controller_firmware	eq	1.1.101
application_policy_infrastructure_controller_firmware	eq	1.1.104
application_policy_infrastructure_controller_firmware	eq	1.1.107
application_policy_infrastructure_controller_firmware	eq	1.1.110
application_policy_infrastructure_controller_firmware	eq	1.2.106
application_policy_infrastructure_controller_firmware	eq	1.2.109
application_policy_infrastructure_controller_firmware	eq	1.3.102
application_policy_infrastructure_controller_firmware	eq	1.3.105
application_policy_infrastructure_controller_firmware	eq	1.3.107
application_policy_infrastructure_controller_firmware	eq	1.3.110