CVE-2016-1365
HighSummary
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential takeover by malicious users.
Recommendation
It is recommended to update to the latest version of APIC-EM to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0
See all- CVE-2017-12262High
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated attacker to gain access to services only available on the internal network of the device. The issue is due to an incorrect firewall rule that may forward traffic from the public interface to the internal virtual network of the APIC-EM.
- CVE-2016-1386High
The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs.
Original NVD description (English source)
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.