返回 CVE 浏览器

CVE-2016-6373

HIGH

7.2

CVSS Severity Score

EPSS Score0.0540%

EPSS Percentile16.30th

Published2016年9月22日

Last Modified2026年5月6日

Vulnerability Description

The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.

Affected Platforms (CPE)

📦

Cisco

Cloud Services Platform 2100

= 2.0.0_base

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1

🔗 http://www.securityfocus.com/bid/93093

🔗 http://www.securitytracker.com/id/1036865

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1

🔗 http://www.securityfocus.com/bid/93093

🔗 http://www.securitytracker.com/id/1036865

相关漏洞威胁

CVE-2017-122519.9

A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker t...

CVE-2016-63749.8

Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in ...

CVE-2018-03948.8

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to ...

CVE-2018-04548.8

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated, remote a...