CVE-2016-1340 Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename argume...

HighCVSS 8.4 EPSS 0.40%

Published: 2016-04-16 04:00
Updated: 2026-06-17 03:41
Exploit status: No public exploit known

Description

Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837.

Affected products

Product	Affected versions	Fixed in
cisco unified computing system platform emulator	= 2.5(2)ts4	No fix listed
cisco unified computing system platform emulator	= 3.0(2c)a	No fix listed
cisco unified computing system platform emulator	= 3.0(2c)ts9	No fix listed

References

20160414 Cisco Unified Computing System Platform Emulator Filename Argument Handling Buffer Overflow Vulnerability vendor-advisory
1035582 third-party-advisory vdb-entry

CVSS v3.0

8.4 High

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Local
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.0 8.4 · nvd@nist.gov
v2.0 7.2 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.40% (percentile 34.2)
CWE: CWE-119

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.