Description
The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-apic
Scores
CVSS v3
7.8
EPSS
0.0040
EPSS Percentile
32.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (16)
cisco/application_infrastructure_controller
cisco/application_policy_infrastructure_controller_firmware
1.0\(1e\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(1h\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(1k\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(1n\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(2j\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(2m\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(3f\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(3i\)
cisco/application_policy_infrastructure_controller_firmware
1.0\(3k\)
... and 6 more
Published
Jun 10, 2016
Tracked Since
Feb 18, 2026