CVE-2016-1366 - CERT CVE
ID CVE-2016-1366
Sažetak The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848.
Reference
CVSS
Base: 6.8
Impact: 6.9
Exploitability:8.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE COMPLETE NONE
CVSS vektor AV:N/AC:L/Au:S/C:N/I:C/A:N
Zadnje važnije ažuriranje 03-12-2016 - 03:20
Objavljeno 24-03-2016 - 22:59