« Volver al listado

CVE-2016-6377

Estado: ModificadaAlta (8.1)—

Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Media Origination System Suite

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-6377",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-09-03T20:59:08.310",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/92715",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/92715",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110."
    },
    {
      "lang": "es",
      "value": "Media Origination System Suite Software 2.6 y versiones anteriores en Cisco Virtual Media Packager (VMP) permite a atacantes remotos eludir la autenticación y hacer llamadas Platform and Applications Manager (PAM) API arbitrarias a través de vectores no especificados, también conocido como Bug ID CSCuz52110."
    }
  ],
  "lastModified": "2026-06-17T00:50:55.607",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9208E81-EF4E-42C9-BD77-E9FD19E0DAF5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E18E4E92-75BA-4791-A17B-B069864AD0FB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(6\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A39D6F2-7AEA-447E-ACE3-5F1FAC41ADE3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(7\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39D20688-639B-4CFB-A31A-A9FBAA7873F4"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(8\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B00B321-8410-4B7E-9C1A-908916002C08"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.3_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "657B0047-458F-45B0-8200-DE4FF9536283"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.4\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45AE1B53-2C49-4D8E-89BA-86A65C60CC3D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.4_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB69C075-898A-4C2C-8172-B133994BD2CA"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.5\\(0\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "666089F8-6F75-4451-852E-7AB92DD458F1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.5\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06F11D6D-F518-4968-B2EB-6B2F0F5AB4A5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.5_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D74A63A5-EBB3-4480-9C0B-BCB9735C73C5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:media_origination_system_suite:2.6_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD08F1E3-2D1F-4575-BECB-A2FF39E97813"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}