Lucene search

CiscoCVE-2016-6461

HistoryNov 19, 2016 - 3:03 a.m.

CVE-2016-6461

2016-11-1903:03:04

CWE-20

cisco

web.nvd.nist.gov

cisco

asa

vulnerability

http

remote code injection

nvd

cve-2016-6461

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.7%

JSON

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.1(6.10). Known Fixed Releases: 100.11(0.75) 100.15(0.137) 100.8(40.129) 96.2(0.95) 97.1(0.55) 97.1(12.7) 97.1(6.30).

Affected configurations

Nvd

Node

ciscoadaptive_security_appliance_softwareMatch9.1\(7\)4

ciscoadaptive_security_appliance_softwareMatch9.1\(7\)7

ciscoadaptive_security_appliance_softwareMatch9.1\(7\)9

ciscoadaptive_security_appliance_softwareMatch9.1\(7\)11

ciscoadaptive_security_appliance_softwareMatch9.1\(7\)12

ciscoadaptive_security_appliance_softwareMatch9.1.6.10

ciscoadaptive_security_appliance_softwareMatch9.2\(0.0\)

ciscoadaptive_security_appliance_softwareMatch9.2\(0.104\)

ciscoadaptive_security_appliance_softwareMatch9.2\(3.1\)

ciscoadaptive_security_appliance_softwareMatch9.2.1

ciscoadaptive_security_appliance_softwareMatch9.2.2

ciscoadaptive_security_appliance_softwareMatch9.2.2.4

ciscoadaptive_security_appliance_softwareMatch9.2.2.7

ciscoadaptive_security_appliance_softwareMatch9.2.2.8

ciscoadaptive_security_appliance_softwareMatch9.2.3

ciscoadaptive_security_appliance_softwareMatch9.2.3.3

ciscoadaptive_security_appliance_softwareMatch9.2.3.4

ciscoadaptive_security_appliance_softwareMatch9.2.4

ciscoadaptive_security_appliance_softwareMatch9.2.4.4

ciscoadaptive_security_appliance_softwareMatch9.2.4.8

ciscoadaptive_security_appliance_softwareMatch9.2.4.10

ciscoadaptive_security_appliance_softwareMatch9.2.4.13

ciscoadaptive_security_appliance_softwareMatch9.2.4.14

ciscoadaptive_security_appliance_softwareMatch9.2.4.16

ciscoadaptive_security_appliance_softwareMatch9.2.4.17

ciscoadaptive_security_appliance_softwareMatch9.3\(1.50\)

ciscoadaptive_security_appliance_softwareMatch9.3\(1.105\)

ciscoadaptive_security_appliance_softwareMatch9.3\(2.100\)

ciscoadaptive_security_appliance_softwareMatch9.3\(2.243\)

ciscoadaptive_security_appliance_softwareMatch9.3.1

ciscoadaptive_security_appliance_softwareMatch9.3.1.1

ciscoadaptive_security_appliance_softwareMatch9.3.2

ciscoadaptive_security_appliance_softwareMatch9.3.2.2

ciscoadaptive_security_appliance_softwareMatch9.3.3

ciscoadaptive_security_appliance_softwareMatch9.3.3.1

ciscoadaptive_security_appliance_softwareMatch9.3.3.2

ciscoadaptive_security_appliance_softwareMatch9.3.3.5

ciscoadaptive_security_appliance_softwareMatch9.3.3.6

ciscoadaptive_security_appliance_softwareMatch9.3.3.9

ciscoadaptive_security_appliance_softwareMatch9.3.3.10

ciscoadaptive_security_appliance_softwareMatch9.3.3.11

ciscoadaptive_security_appliance_softwareMatch9.3.5

ciscoadaptive_security_appliance_softwareMatch9.4.0.115

ciscoadaptive_security_appliance_softwareMatch9.4.1

ciscoadaptive_security_appliance_softwareMatch9.4.1.1

ciscoadaptive_security_appliance_softwareMatch9.4.1.2

ciscoadaptive_security_appliance_softwareMatch9.4.1.3

ciscoadaptive_security_appliance_softwareMatch9.4.1.5

ciscoadaptive_security_appliance_softwareMatch9.4.2

ciscoadaptive_security_appliance_softwareMatch9.4.2.3

ciscoadaptive_security_appliance_softwareMatch9.4.3

ciscoadaptive_security_appliance_softwareMatch9.4.3.3

ciscoadaptive_security_appliance_softwareMatch9.4.3.4

ciscoadaptive_security_appliance_softwareMatch9.4.3.6

ciscoadaptive_security_appliance_softwareMatch9.4.3.8

ciscoadaptive_security_appliance_softwareMatch9.4.3.11

ciscoadaptive_security_appliance_softwareMatch9.4.3.12

ciscoadaptive_security_appliance_softwareMatch9.4.4

ciscoadaptive_security_appliance_softwareMatch9.5.1

ciscoadaptive_security_appliance_softwareMatch9.5.2

ciscoadaptive_security_appliance_softwareMatch9.5.2.6

ciscoadaptive_security_appliance_softwareMatch9.5.2.10

ciscoadaptive_security_appliance_softwareMatch9.5.2.14

VendorProductVersionCPE
ciscoadaptive_security_appliance_software9.1(7)4cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)4:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.1(7)7cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)7:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.1(7)9cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)9:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.1(7)11cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)11:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.1(7)12cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)12:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.1.6.10cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.2(0.0)cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\(0.0\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.2(0.104)cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\(0.104\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.2(3.1)cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\(3.1\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software9.2.1cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_software	9.1(7)4	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)4:::::::*
cisco	adaptive_security_appliance_software	9.1(7)7	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)7:::::::*
cisco	adaptive_security_appliance_software	9.1(7)9	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)9:::::::*
cisco	adaptive_security_appliance_software	9.1(7)11	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)11:::::::*
cisco	adaptive_security_appliance_software	9.1(7)12	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\(7\)12:::::::*
cisco	adaptive_security_appliance_software	9.1.6.10	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:::::::*
cisco	adaptive_security_appliance_software	9.2(0.0)	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\(0.0\):::::::*
cisco	adaptive_security_appliance_software	9.2(0.104)	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\(0.104\):::::::*
cisco	adaptive_security_appliance_software	9.2(3.1)	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\(3.1\):::::::*
cisco	adaptive_security_appliance_software	9.2.1	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:::::::*

Rows per page:

1-10 of 631

CNA Affected

[
  {
    "product": "Cisco Adaptive Security Appliance (ASA) 9.1(6.10)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Adaptive Security Appliance (ASA) 9.1(6.10)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94365

www.securitytracker.com/id/1037306

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161116-asa

Social References

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.7%

JSON

Related for CVE-2016-6461