PT-2016-1574 · Cisco · Cisco Ios Xr

Published 2016-03-23 · Updated 2016-12-03 · CVE-2016-1366

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.0.0 through 5.2.5

Description The issue is related to weak permissions for system files in the SCP and SFTP modules, allowing remote authenticated users to cause a denial of service by overwriting system files. This is due to improper setting of permissions on the filesystem for certain paths that include system files. An attacker could exploit this by using either the SCP or SFTP client to overwrite system files on the affected device, resulting in a denial of service condition.

Recommendations For Cisco IOS XR versions 5.0.0 through 5.2.5, consider restricting access to the SCP and SFTP modules to minimize the risk of exploitation, as there are no available software updates or workarounds that address this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-00875

CVE-2016-1366

Affected Products

Cisco Ios Xr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1366 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00875 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1366 · Vendor Advisory
• http://securitytracker.com/id/1035407 · Note