PT-2016-6886 · Cisco · Cisco Ios Xe+2

Published 2016-09-21 · Updated 2017-07-30 · CVE-2016-6412

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.6(1)T1 and later Cisco IOS XE (affected versions not specified)

Description A issue in the Cisco Application-hosting Framework (CAF) component allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers. The vulnerability is due to insufficient input validation, which could allow an unauthenticated, remote attacker to cause a CAF user to download a file controlled by the attacker by injecting crafted HTTP headers into the communication path between the user and CAF.

Recommendations For Cisco IOS version 15.6(1)T1, update to a fixed software version. For Cisco IOS XE, update to a fixed software version. As a temporary workaround, consider restricting access to the CAF component until a patch is available. Avoid using the IOx feature set in Cisco IOS and IOS XE Software until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6412

Affected Products

Cisco Application-Hosting Framework

Cisco Ios

Cisco Ios Xe

References · 5

• https://osv.dev/vulnerability/CVE-2016-6412 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6412 · Security Note
• http://securityfocus.com/bid/93088 · Note
• http://securitytracker.com/id/1036874 · Note