CVE-2016-1365 The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted...
HighCVSS 8.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco application policy infrastructure controller enterprise module | = 1.0.10 | No fix listed |
References
- 20160817 Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability vendor-advisory
- 92507 vdb-entry
- 1036634 vdb-entry