CVE-2016-1320
medium
CVSS v3
6.7
CVSS v2
6.8
VIR risk
6.7
Description
The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286.
Predictions
Exploit likelihood
66%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160209-pcp
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| cisco | prime_collaboration | 9.0.0 | |
| cisco | prime_collaboration | 9.0.5 | |
| cisco | prime_collaboration | 11.0.0 | |
References
CWEs
CWE-78 CWE-264
Verify integrity in audit chain (admin only). AS-IS.