PT-2016-7712 · Cisco+1 · Cisco Cloudcenter Orchestrator+1

Published 2016-12-26 · Updated 2017-01-03 · CVE-2016-9223

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco CloudCenter Orchestrator (CCO) (affected versions not specified)

Description A vulnerability in the Docker Engine configuration could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. This issue affects systems where the Docker Engine TCP port 2375 is open and bound to the local address 0.0.0.0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-9223

Affected Products

Cisco Cloudcenter Orchestrator

Docker Engine

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-9223 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9223 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-cco · Vendor Advisory
• http://securityfocus.com/bid/95024 · Note