CVE-2016-6413

Published: Sep 24, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva50496.

Affected (1)

Products: Cisco: Application Policy Infrastructure Controller

Cisco

1 product

Application Policy Infrastructure Controller

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Application Policy Infrastructure Controller	Version 1.3(2f)

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-apic

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1036872

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-apic

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1036872

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.