Back to CVE Browser

CVE-2016-6373

HIGH

7.2

CVSS Severity Score

EPSS Score0.0540%

EPSS Percentile16.30th

PublishedSep 22, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.

Affected Platforms (CPE)

📦

Cisco

Cloud Services Platform 2100

= 2.0.0_base

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1

🔗 http://www.securityfocus.com/bid/93093

🔗 http://www.securitytracker.com/id/1036865

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1

🔗 http://www.securityfocus.com/bid/93093

🔗 http://www.securitytracker.com/id/1036865

Related Vulnerabilities

CVE-2017-122519.9

A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker t...

CVE-2016-63749.8

Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in ...

CVE-2018-03948.8

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to ...

CVE-2018-04548.8

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated, remote a...