CVE-2016-9199

MEDIUM

Cisco IOx <15.2(6.0.57i)E - Info Disclosure

Title source: llm

Description

A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulnerability affects specific releases of the Cisco IOx subsystem of Cisco IOS and IOS XE Software. More Information: CSCvb23331. Known Affected Releases: 15.2(6.0.57i)E CAF-1.1.0.0.

References (3)

Scores

CVSS v3 6.5
EPSS 0.0090
EPSS Percentile 75.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-22
Status published

Affected Products (2)

cisco/iox
n/a/Cisco IOx < Cisco IOx

Timeline

Published Dec 14, 2016
Tracked Since Feb 18, 2026