CVE-2016-6414

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2016-09-22

Last modified

2024-08-06

Weaknesses

CWE-78

Affected products

• Ios (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-iox
• http://www.securityfocus.com/bid/93091
• http://www.securitytracker.com/id/1036876