PT-2016-7710 · Cisco · Cisco Ios Xr

Publicado 2016-12-07 · Atualizado 2016-12-22 · CVE-2016-9215

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software version 6.1.1.BASE

Description A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. The issue is due to a user account that has a default and static password, which an attacker could exploit by connecting to the affected system using this default account. This could allow the attacker to gain complete control of the underlying operating system.

Recommendations For Cisco IOS XR Software version 6.1.1.BASE, update the software to remove the default and static password for the affected user account to prevent exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-9215

Produtos afetados

Cisco Ios Xr

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-iosxr · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9215 · Aviso do Fabricante
• http://securitytracker.com/id/1037418 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9215 · Nota de Segurança
• http://securityfocus.com/bid/94812 · Nota