Lucene search

CiscoCVE-2016-9210

HistoryDec 14, 2016 - 12:59 a.m.

CVE-2016-9210

2016-12-1400:59:32

CWE-22

cisco

web.nvd.nist.gov

cve-2016-9210

cisco

unified reporting

vulnerability

remote attacker

file modification

nvd

security advisory

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

48.1%

JSON

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.168) 12.0(0.98000.178) 12.0(0.98000.399) 12.0(0.98000.510) 12.0(0.98000.536) 12.0(0.98500.7).

Affected configurations

Nvd

Node

ciscounified_communications_managerMatch11.5\(1.11007.2\)

VendorProductVersionCPE
ciscounified_communications_manager11.5(1.11007.2)cpe:2.3:a:cisco:unified_communications_manager:11.5\(1.11007.2\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_communications_manager	11.5(1.11007.2)	cpe:2.3:a:cisco:unified_communications_manager:11.5\(1.11007.2\):::::::*

CNA Affected

[
  {
    "product": "Cisco Unified Reporting",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Unified Reporting"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94798

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cur

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

48.1%

JSON

Related for CVE-2016-9210