CVE-2016-1366

Published: Mar 24, 2016Modified: May 6, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848.

Affected (6)

Products: Cisco: Ios Xr

Cisco

1 product

Ios Xr

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xr	Version 5.0.0
Cisco Ios Xr	Version 5.0.1
Cisco Ios Xr	Version 5.2.1
Cisco Ios Xr	Version 5.2.3
Cisco Ios Xr	Version 5.2.4
Cisco Ios Xr	Version 5.2.5

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1035407

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035407

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.