NVD

Id
17830  
Name
CVE-2016-1420  
Description
The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-06-09  
Modified Date
2016-06-10  
Seq
2016-1420  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97816 17830 CVE-2016-1420 20160609 Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2321 JVNDB-2016-003094 Cisco Application Policy Infrastructure Controller デバイスのソフトウェアにおける root アクセス権を取得される脆弱性 Cisco Application Policy Infrastructure Controller (APIC) デバイスのソフトウェアのインストールコンポーネントは、バイナリファイルを誤って処理するため、root アクセス権を取得される脆弱性が存在します。 CVE-2016-1420 87926 CVE-2016-1420 17830 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003094.html 2016-06-09 2016-06-14 View