6.8
CVSSv2

CVE-2016-6405

Published: 18/09/2016 Updated: 28/11/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N

Vulnerability Summary

A vulnerability in the Cisco Fog Director for IOx could allow an authenticated, remote malicious user to write a file to arbitrary locations. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file via the Cartridge interface. An exploit could allow the malicious user to write or overwrite arbitrary files on an affected system. Cisco has released software updates that address this vulnerability. Workarounds that address this vulnerability are not available. This advisory is available at the following link: tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ioxfd

Vulnerable Product Search on Vulmon Subscribe to Product

cisco fog director 1.0\\(0\\)

Vendor Advisories

A vulnerability in the Cisco Fog Director for IOx could allow an authenticated, remote attacker to write a file to arbitrary locations The vulnerability is due to insufficient input validation An attacker could exploit this vulnerability by uploading a crafted file via the Cartridge interface An exploit could allow the attacker to write or ove ...