CVE-2016-6402

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.

Published: Sep 19, 2016
Updated: Apr 13, 2023
CVE: CVE-2016-6402
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
cisco / unified_computing_system	2.2(4c)	2.2(4c).x
cisco / unified_computing_system	2.2(1c)	2.2(1c).x
cisco / unified_computing_system	2.2(3f)	2.2(3f).x
cisco / unified_computing_system	2.2(2c)a	2.2(2c)a.x
cisco / unified_computing_system	3.0(1d)	3.0(1d).x
cisco / unified_computing_system	2.2(5b)a	2.2(5b)a.x
cisco / unified_computing_system	2.2_base	2.2_base.x
cisco / unified_computing_system	2.2(2e)	2.2(2e).x
cisco / unified_computing_system	2.2(1b)	2.2(1b).x
cisco / unified_computing_system	3.0(2d)	3.0(2d).x
cisco / unified_computing_system	2.2(5a)	2.2(5a).x
cisco / unified_computing_system	2.2(1f)	2.2(1f).x
cisco / unified_computing_system	3.0(1e)	3.0(1e).x
cisco / unified_computing_system	3.0(1c)	3.0(1c).x
cisco / unified_computing_system	2.2(3a)	2.2(3a).x
cisco / unified_computing_system	2.2(1e)	2.2(1e).x
cisco / unified_computing_system	2.2(3d)	2.2(3d).x
cisco / unified_computing_system	2.2(3b)	2.2(3b).x
cisco / unified_computing_system	2.2(3c)	2.2(3c).x
cisco / unified_computing_system	2.2(1g)	2.2(1g).x
cisco / unified_computing_system	2.2(4b)	2.2(4b).x
cisco / unified_computing_system	2.2(1h)	2.2(1h).x
cisco / unified_computing_system	2.2(2c)	2.2(2c).x
cisco / unified_computing_system	2.2(1d)	2.2(1d).x
cisco / unified_computing_system	2.2(3e)	2.2(3e).x
cisco / unified_computing_system	2.2(3g)	2.2(3g).x
cisco / unified_computing_system	2.2(2d)	2.2(2d).x
cisco / unified_computing_system	3.0(2c)	3.0(2c).x

Vulnerability Database

289,599

CVE-2016-6402