PT-2016-6923 · Cisco · Cisco Ios Xe

Published 2016-11-15 · Updated 2017-07-28 · CVE-2016-6450

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.7(0) through 16.4.1 Cisco IOS XE Software versions Denali-16.1.3 through Denali-16.3.1

Description A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This is due to insufficient validation of files submitted to the affected installation utility. An attacker could exploit this vulnerability by uploading a crafted file to an affected system and running the installation utility command, potentially allowing them to override write-accessible files and compromise system integrity. The attacker must have sufficient privileges, specifically privilege 15 in a default configuration, to exploit this vulnerability.

Recommendations For Cisco IOS XE Software versions 3.7(0) through 16.4.1, update to version 16.5(0.29) or later. For Cisco IOS XE Software versions Denali-16.1.3 through Denali-16.3.1, update to version 16.3(1.22) or later. As a temporary workaround, consider restricting access to the installation utility command to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6450

Affected Products

Cisco Ios Xe

References · 5

• https://osv.dev/vulnerability/CVE-2016-6450 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161115-iosxe · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6450 · Security Note
• http://securityfocus.com/bid/94340 · Note
• http://securitytracker.com/id/1037299 · Note