CVE-2016-9199 A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulner...
MediumCVSS 6.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulnerability affects specific releases of the Cisco IOx subsystem of Cisco IOS and IOS XE Software. More Information: CSCvb23331. Known Affected Releases: 15.2(6.0.57i)E CAF-1.1.0.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco iox | = 1.1.0 | No fix listed |
References
- 94788 third-party-advisory vdb-entry
- 1037427 third-party-advisory vdb-entry
- tools.cisco.com vendor-advisory