Lucene search

CiscoCVE-2016-1320

HistoryFeb 12, 2016 - 1:59 a.m.

CVE-2016-1320

2016-02-1201:59:03

CWE-264

CWE-78

cisco

web.nvd.nist.gov

cisco

prime collaboration

cli

local users

arbitrary os commands

root

bug id

cscux69286

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

5.2%

JSON

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286.

Affected configurations

Nvd

Node

ciscoprime_collaborationMatch9.0.0

ciscoprime_collaborationMatch9.0.5

ciscoprime_collaborationMatch11.0.0

VendorProductVersionCPE
ciscoprime_collaboration9.0.0cpe:2.3:a:cisco:prime_collaboration:9.0.0:*:*:*:*:*:*:*
ciscoprime_collaboration9.0.5cpe:2.3:a:cisco:prime_collaboration:9.0.5:*:*:*:*:*:*:*
ciscoprime_collaboration11.0.0cpe:2.3:a:cisco:prime_collaboration:11.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	prime_collaboration	9.0.0	cpe:2.3:a:cisco:prime_collaboration:9.0.0:::::::*
cisco	prime_collaboration	9.0.5	cpe:2.3:a:cisco:prime_collaboration:9.0.5:::::::*
cisco	prime_collaboration	11.0.0	cpe:2.3:a:cisco:prime_collaboration:11.0.0:::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160209-pcp

www.tenable.com/security/research/tra-2016-38

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

5.2%

JSON

Related for CVE-2016-1320