CVE-2016-6402

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.

Published: Sep 18, 2016
Updated: Nov 9, 2025
CVE: CVE-2016-6402
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
cisco / unified_computing_system	2.2(4c)	2.2(4c).x
cisco / unified_computing_system	2.2(1c)	2.2(1c).x
cisco / unified_computing_system	2.2(3f)	2.2(3f).x
cisco / unified_computing_system	2.2(2c)a	2.2(2c)a.x
cisco / unified_computing_system	3.0(1d)	3.0(1d).x
cisco / unified_computing_system	2.2(5b)a	2.2(5b)a.x
cisco / unified_computing_system	2.2_base	2.2_base.x
cisco / unified_computing_system	2.2(2e)	2.2(2e).x
cisco / unified_computing_system	2.2(1b)	2.2(1b).x
cisco / unified_computing_system	3.0(2d)	3.0(2d).x
cisco / unified_computing_system	2.2(5a)	2.2(5a).x
cisco / unified_computing_system	2.2(1f)	2.2(1f).x
cisco / unified_computing_system	3.0(1e)	3.0(1e).x
cisco / unified_computing_system	3.0(1c)	3.0(1c).x
cisco / unified_computing_system	2.2(3a)	2.2(3a).x
cisco / unified_computing_system	2.2(1e)	2.2(1e).x
cisco / unified_computing_system	2.2(3d)	2.2(3d).x
cisco / unified_computing_system	2.2(3b)	2.2(3b).x
cisco / unified_computing_system	2.2(3c)	2.2(3c).x
cisco / unified_computing_system	2.2(1g)	2.2(1g).x
cisco / unified_computing_system	2.2(4b)	2.2(4b).x
cisco / unified_computing_system	2.2(1h)	2.2(1h).x
cisco / unified_computing_system	2.2(2c)	2.2(2c).x
cisco / unified_computing_system	2.2(1d)	2.2(1d).x
cisco / unified_computing_system	2.2(3e)	2.2(3e).x
cisco / unified_computing_system	2.2(3g)	2.2(3g).x
cisco / unified_computing_system	2.2(2d)	2.2(2d).x
cisco / unified_computing_system	3.0(2c)	3.0(2c).x

Vulnerability Database

313,825

CVE-2016-6402

Deep Security Visibility Without the Complexity