CVE-2016-6373

The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.

Score

CVSS 3.0 7.2 High

Status

Modified - psirt@cisco.com

Published

2016-09-22

Last modified

2024-08-06

Weaknesses

CWE-78

Affected products

• Cloud Services Platform 2100 (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1
• http://www.securityfocus.com/bid/93093
• http://www.securitytracker.com/id/1036865