CVE-2016-1366
MEDIUMCisco IOS XR 5.0.0-5.2.5 - Authenticated Denial of Service via SCP/SFTP File Overwrite
Title source: llmDescription
The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1035407
Scores
CVSS v3
6.5
EPSS
0.0138
EPSS Percentile
69.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-264
Status
published
Products (6)
cisco/ios_xr
5.0.0
cisco/ios_xr
5.0.1
cisco/ios_xr
5.2.1
cisco/ios_xr
5.2.3
cisco/ios_xr
5.2.4
cisco/ios_xr
5.2.5
Published
Mar 24, 2016
Tracked Since
Feb 18, 2026